One or more rules for performing one or more network switch functions, the one or more rules conforming to an improved rule structure, are provided. The improved rule structure comprises a first specification defining one or more conditions to be met, the one or more conditions comprising or including one or more conditions to be met by one or more usage-derived packet statistics, and a second specification defining one or more actions to be taken by the network switch if the one or more specified conditions are met.