According to one embodiment of the present invention, a method for reconstructing client web page accesses is provided that comprises capturing network-level information for client accesses of at least one web page, and using the captured network-level information to reconstruct client accesses of the at least one web page. Another embodiment of the present invention provides a method for reconstructing client information accesses. The method comprises capturing network-level information for client accesses of information from a server, wherein each client access of the information comprises a plurality of transactions. The method further comprises relating the plurality of transactions to their corresponding client access of information from the server.