net-flow is the way to do this, MRTG or rrd is the front end. http://www.caida.org/tools/utilities/flowscan/ -- Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe Archive http://www.ee.ethz.ch/~slist/mrtg FAQ http://faq.mrtg.org Homepage http://www.mrtg.org WebAdmin http://www.ee.ethz.ch/~slist/lsg2.cgi