A system that efficiently and effectively monitors Internet protocol (IP) data being transferred in an asynchronous transfer mode (ATM) protocol and provides the information necessary according to a list of specified rules and a method and computer program product therefor are provided. The system allows for opening a process flow associated with the IP data such that the total amount of information about the process flow is reduced and the associated data is promptly recognized as belonging to a specific process flow. The system is capable of directing the data belonging to a certain process flow to an assigned network processor out of a plurality of such processors, while maintaining a balanced load between those processors.