Hello, 


> ooh, ooh, can I guess?  ;)  Certainly not because people love to add
> every last feature and piece of bloat to them that they possibly can.
>
> ntop is best suited to a system on your LAN on a span port.  

A "span port" is a port where all traffic is "reflected" so that a software
(Intrusion-Detection Software) can scan for attacks ?
Is there a possibility to set up a span port in m0n0 wall ?

Sebastian