A method for monitoring packets sourced from a group of client customer devices defining a subset of client customer devices, each of the packets having at least a part of a layer 2 header, generated by the source client customer device, replaced with a unique bit string, the method comprising:
- a) determining whether or not the packet belongs to the group of client customer, devices using at least a portion of the unique bit string;
- and
- b) if it is determined that the packet does belong to the group of client customer devices, then
- i) copying the packet to generate a duplicate packet, and
- ii) forwarding the duplicate packet to a monitoring facility, wherein the monitoring facility monitors at least one of (A) service provided to a group of customers, and (B) security.