Is it possible (and how do you do it) to obtain traffic metrics individually by IP adresses? For example, I use squid and sarg to give me the details about port 80 traffic daily and that works great. More and more, I'm finding I need to be able to get the detail of every connection that is both outgoing and incoming to my netfilter gateway.
An example of this is say audio downloads - they typically are run on different ports and I want to know their stauration of our T1s. Has anyone been able to get this detailed information (short of tcpdumping it all out?)
