Abstract: A system and method for analyzing network traffic activity by displaying a collection of flow objects and receiving a user's selection of a traffic operation that is to be applied to a set of selected flow objects. Thereafter, the results of applying the traffic operation to the selected flow objects are displayed. The traffic operation may include a merge operation that provides statistics related to an aggregation of the flow objects. The traffic operation may also include a modification operation that modifies the selected flow objects, including, for example, a modification based on predicted traffic flow. Other traffic operations may also be provided, including providing access to plug-in traffic operation applications.

Abstract: Traffic flows through an administered network from an off-network source and/or to an off-network destination are simulated and analyzed by selecting an ingress and/or egress node within the administered network, the ingress node capable of collecting traffic from an off-network source, and the egress node capable of routing traffic to an off-network destination. Traffic flow is mapped from the source or ingress node through the administered network to the egress node. The traffic flow may be simulated and analyzed. The ingress and/or egress nodes may be selected in a variety of ways.

Abstract: Traffic flows through an administered network from an off-network source and/or to an off-network destination are simulated and analyzed by selecting an ingress and/or egress node within the administered network, the ingress node capable of collecting traffic from an off-network source, and the egress node capable of routing traffic to an off-network destination. Traffic flow is mapped from the source or ingress node through the administered network to the egress node. The traffic flow may be simulated and analyzed. The ingress and/or egress nodes may be selected in a variety of ways.

Abstract: A system for analyzing network activity by displaying in a first portion of a display, network objects according to an activity characteristic, receiving a selection of one or more of the network objects, and displaying in a second portion of the display, a further activity characteristic of the selected network objects according to at least a first criteria. The display of the network objects may be altered according to second criteria that may include filtering criteria that removes network objects displayed in the first portion. The results of the altered display may be displayed in a third portion of the display providing further details of the selected network objects. The selection of the network object may be a selection of a plurality of objects and the displayed activity characteristic may be a sum of the selected network objects activity characteristics.