A method and apparatus for aggregating network traffic using "cascade" of individual nodes, where each node connected to, and configured to monitor, two or more nodes below it. Each node has two or more inputs. These inputs are connected to a CPU having a memory buffer to temporarily store the network data streams from the inputs, and an outlet port capable of transferring network data streams from the memory buffer and the CPU to an output network. The CPU is thus connected to the inputs, the memory buffer and the outlet port, and serves to transfer network data streams from the inputs to the memory buffer, and to simultaneously transmit the network data streams from the memory buffer to the outlet port. Nodes that gather network data streams directly from the network have two or more network controllers, each of which are connected to the network to receive network data streams from the network, and also connected to the node inputs to transfer data to the CPU and the memory buffer.