A data stream classification method includes obtaining, based on a packet feature of a current data stream and a behavior classification model, at least one first confidence that is of the current data stream and that corresponds to at least one data stream class, where the behavior classification model is based on a plurality of data stream samples; obtaining, based on feature information of the current data stream and a content classification model, at least one second confidence that is of the current data stream and that corresponds to the at least one data stream class, where the content classification model is based on one or more historical data streams; and determining a data stream class of the current data stream based on the at least one first confidence and the at least one second confidence.