They don't need a court order to sniff packets and do bulk collection. All that data goes into huge data centers. If they want to query that collected data for an American's information, they get a warrant. No human looks at an American's data before getting a warrant. You'd do well to familiarize yourself with their process, which is highly publicized.