A method or apparatus for managing monitoring of packet data traffic of a packet switched telephony trunk connection, such as an IP trunk, wherein the data packets identify ports but monitoring is based on extension lines and the like. A mapping unit is used for obtaining mapping data that relates ports to respective individual connections or extension lines. A packet duplication unit copies data traffic from the trunk, and an associative access unit either stores or allows direct use of the data via the mapping information.