You might consider using Argus, aka the poor-person's Cisco Netflow collector. It captures all networks flows and you can do things like identify top talkers as well as the things you mentioned.
http://qosient.com/argus/ I can definitely help you out if you need it. Andy KoreLogic Security 603.465.3236 (Office) 603.340.2498 (Mobile) http://www.korelogic.com GnuPG Fingerprint: 688A 79EC B1E5 5748 CE87 1F20 2C45 60E7 0583 23B6 On Tue, Jul 10, 2007 at 08:48:36PM +0000, [EMAIL PROTECTED] wrote: > Hi All, > > I find myself in the dis-pleasing position of needing to monitor internet > usage in one of our branch offices. I am looking for recommendations on > packages for this purpose. What I need to do is put a box between the > internal router and the firewall that will monitor the traffic and correlate > it. I need to gather information on what internal IP addresses are accessing > what websites, how often, etc. (you know, the usual disdainful big-brother > type of information). Any suggestions as to how anyone else has done this > would be appreciated, I guess.... > > TIA, > Kenny > > PS If you hadn't guessed, I really hate doing this sort of thing. > _______________________________________________ > gnhlug-discuss mailing list > gnhlug-discuss@mail.gnhlug.org > http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/ -- _______________________________________________ gnhlug-discuss mailing list gnhlug-discuss@mail.gnhlug.org http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/