Flow information records are identified and sorted out based on the sending and/or receiving customer. Prior art problems are overcome by using a combination of router identification, SNMP numbers and interface numbers to identify the source and destination of data flow records. A flow information packet containing one or more information flow records is received at a flow process and parsed to identify the router source. The datagram of the flow information packet is examined to identify an SNMP number associated with the source and/or destination affiliated with the flow information packet. Based on the SNMP number, the interface of the router associated with the datagram is identified and the records are accordingly sorted into buckets. The total traffic through the router interface for a period of time is obtained via an SNMP query and the data apportioned to a bucket is scaled based on the results.