Medication usage auditing based on analysis of infusion pump network traffic

This disclosure describes a system, a method, and a computer program that enable auditing reported amounts of infused medications at a medical facility. In one embodiment, a computer receives packets transmitted over a communication network, where the packets include data related to activity of infusion pump systems at the medical facility. The computer performs deep packet inspection (DPI) of the packets, and extracts, from results of the DPI, values that include dosages of medications delivered to patients during treatment sessions using the infusion pump systems. The computer calculates, based on the values, amounts of the medications that were provided to the patients during the treatment sessions (actual amounts). Additionally, the computer receives amounts of the medications reported as being provided to the patients during the treatment sessions (reported amounts). The computer forwards a result of a comparison between the actual amounts and the reported amounts.