The answer turns out to be deep packet inspection, which examines network traffic to identify what you're sending and where it's going.

ENGADGET: Dutch telco KPN using deep packet inspection to monitor mobile customers, throttle services