http://www.wallwatcher.com enable snmp and remote syslog wallwatcher (among other pkg's) will collect per IP statistics. as far as what's available at the fw (local-box)...nada. - Don