1. A method of analyzing network traffic comprising: identifying a thread identifier associated with a transaction; identifying one or more events related to the thread identifier; determining a type of the transaction to be a first type of transaction; comparing the first type of transaction with respective types of transactions among entries in an aggregated list of transactions; and associating the transaction and the one or more events related to the thread identifier associated with the transaction with an entry in the aggregated list of transactions based on a match between the first type of transaction and a respective one of the types of transactions associated with the entry in the aggregated list of transactions, wherein the thread identifier is represented by an address location and/or a pointer to an address location in a kernel of a control block of a thread corresponding to the thread identifier.