A system and method for monitoring bursting traffic of a user. CIR tokens are incremented at a first rate. EIR tokens are incremented at a second rate. At bit is received for communication through a user network interface. A determination is made whether there are EIR tokens in response to a determination that there are no CIR tokens. The EIR tokens are decremented in response to a determination that there are EIR tokens. The bit is communicated through a network in response to the determination that there are EIR tokens.