The present invention relates to a traffic analysis method and tool for a network based on TCP/IP or UDP/IP or a combination thereof comprising passive monitoring means at intermediate nodes of the network, and estimation means to determine a full set of network traffic metrics connected to said passive monitoring means.