(EN) A system and method for preparing network flows for analysis by decomposing such flows into a plurality of elements which are then tagged. Tagged elements may optionally comprise any type of element according to any type of network flow standard, including but not limited to the IPFIX or Netflow standards, or may optionally be derived from such elements.