 to control a first switch and a second switch in a network, causes the network device to perform operations comprising: receiving (000) flow statistics for a first flow from the first switch; determining (000), based on the flow statistics for the first flow, that the first flow has a traffic usage that exceeds a pre-defined threshold; and in response to determining that the first flow has a traffic usage that exceeds the pre-defined threshold, programming (000) the second switch to create a new flow table for processing the first flow, wherein the new flow table is a dedicated flow table for processing the first flow, wherein the new flow table for processing the first flow is created by: determining, based on analysis of the flow statistics, that the first flow to which a packet belongs is a highly active flow; and creating the new flow table for processing the highly active flow that only includes flow entries for processing the highly active flow. 00. The non-transitory machine-readable storage medium of claim 00, wherein the 