Methods, systems, and computer program products for packet inspection are provided herein. The method includes the steps of receiving a first packet of a stream of packets and processing the first packet using a slow processing path. The method also includes the steps of examining a network layer or transport layer of the first packet to determine whether a protocol used by the stream of packets is relevant, and transferring subsequent packets in the stream to a fast processing path if the protocol used is not relevant. The method further includes the steps of examining an application layer of a pre-determined number of packets subsequent to the first packet to determine whether a Uniform Resource Locator (URL) field of each of the pre-determined number of packets is relevant, and transferring packets subsequent to the pre-determined number of packets to a fast processing path if the URLs are not relevant.