Take a look at ntop: http://ntop.org. It gives you so much info about 
every node on your network it's scary. An easy way to try ntop is by 
using the Network Security Toolkit http://nst.sourceforge.net/nst/, a 
bootable Live CD which includes ntop.

  What can ntop do for me?

     * Sort network traffic according to many protocols
     * Show network traffic sorted according to various criteria
     * Display traffic statistics
     * Store on disk persistent traffic statistics in RRD format
     * Identify the indentity (e.g. email address) of computer users
     * Passively (i.e. withou sending probe packets) identify the host OS
     * Show IP traffic distribution among the various protocols
     * Analyse IP traffic and sort it according to the source/destination
     * Display IP Traffic Subnet matrix (who's talking to who?)
     * Report IP protocol usage sorted by protocol type
     * Act as a NetFlow/sFlow collector for flows generated by routers 
(e.g. Cisco and Juniper) or switches (e.g. Foundry Networks)
     * Produce RMON-like network traffic statistics

Don Munyak wrote:
> Nathan
> 
> On 1/31/06, Nathan Harris <nharris at eoimaging dot com> wrote:
>> I need to monitor the network traffic through my m0n0wall from LAN->WAN
>> on a workstation by workstation basis.  It would be great to have a
>> graphical breakdown by LAN IP over time (RRDTool, MRTG, etc..).
>> However, what I really need is a real time tool to track down which
>> workstation is consuming WAN resources.
>>
>> Does anyone know of a solution for this?
>>
>> Thanks,
>>
>> -Nathan
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
>> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
>>
>>
> 
> 
> I am working on trying to figure out cacti. Someone else posted a
> reference to it the other day. I have similiar interests.
> http://www.cacti.net I was told by one of the main contributors that
> he uses it on about 75 hosts.  I'v got it installed and sort-of
> working on FreeBSD 5.4 . Still working on figuring out how to capture
> data. I think this has to do with "data sources".
> 
> Anyway, check it out. Once installed the interface is kinda nice. It
> uses RRDTool, Mysql, Apache, PHP, Net-SNMP
> 
> ~ Don
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
>