View article

Method and system for capturing summaries of data flows in an electronic, packet-switched communication network, the method comprising: receiving, from a node of the communication network, packet flow data; obtaining a subset of the packet flow parameters (IP src, IP dst, port src, port dst, protocol), based on the packet flow data; obtaining a packet flow statistic, based on the packet flow data; updating a collection of stored packet flow summaries, based on a subset of the packet flow parameters and the packet flow statistic. The stored packet flow summaries are arranged as nodes in a tree data structure.