The invention correlates inbound/outbound data packets with one or more processes responsible for receiving/generating the data packet and by logging the local process unique identifier for the packet. The invention also correlates the packets into communication streams and logs the local communication stream unique identifier with the local process unique identifier.