> 2- For total traffic, you could write some scripot to query the SNMP
> interface/counter every 5 minutes or so. Basically, every time the script
> runs, it reads the counter values from the interface, then calculates the
> delta from the last value, if the delta is negative, then the counter has
> re-set, so  then add the current value to the difference between the last
> value and 4294967295. Then write this number down. Perhaps as
> variables in a
> text file.
>

5 minutes is the standard for 100Mb feeds... you have to go faster if you
have a 1Gb interface.

This is exactly what MRTG is intended to do. Produces pretty graphs too ;-)

There are a couple other systems that do similar - some log to DB, etc.

m/