I went to a talk on multi-protocol attacks. They are awesome. I want to break into computers now.
What I got from the talk is that all encrypted packets should have a header with a GUID stating the name of the protocol and the packet type, and maybe the session number and state of the protocol as well.