1. A datastream management system comprising: a. a filter transform aggregate for managing a high speed input data stream with a plurality of packets, wherein each packet comprises at least one attribute, and wherein the filter transform aggregate comprises: i. an evaluation system to evaluate the high speed input data stream and to partition the plurality of packets into groups using similar attributes; ii. a table to store the attributes of the plurality of packets using a hash function; and iii. computer instruction to form a phantom query, wherein the phantom query uses a partitioned group of packets with attributes different than those used to group the plurality of packets into groups for solving user queries without performing the user queries on the high speed input data stream; b. a memory storing the filter transform aggregate; and c. a processor operating the filter transform aggregate.