Abstract: A method and apparatus for monitoring telecommunications network elements, especially where direct access to those network elements is not available. The invention allows a network manager to build and maintain significant relationship information, as well as model the state of network elements with a high degree of accuracy, but based only on the information contained within the transactions built from the network traffic which is being monitored. In particular, it allows the network manager to obtain the same results that would previously have required direct access to an operator's network elements.