There is also ntop (www.ntop.org) and etherape
(etherape.sourceforge.net). Both are better run on a box that isn't a
policy enforcement point.
--
=Wayne

On 2/22/06, Quark IT - Hilton Travis <Hilton at quarkit dot com dot au> wrote:
> Hi Eduardo, Paul,
>
> There's a package for Linux called IPTraf that does exactly this, and is
> what's used in IPCop (from memory) and SmoothBalls (from even vaguer
> memory).
>
> --
>
> Regards,
>
> Hilton Travis                          Phone: +61 (0)7 3344 3889
> (Brisbane, Australia)                  Phone: +61 (0)419 792 394
> Manager, Quark IT                      http://www.quarkit.com.au
>          Quark AudioVisual             http://www.quarkav.net
>
> http://www.threatcode.com/ <-- its now time to shame poor coders
> into writing code that is acceptable for use on today's networks
>
> War doesn't determine who is right.  War determines who is left.
>
> This document and any attachments are for the intended recipient
>   only.  It may contain confidential, privileged or copyright
>      material which must not be disclosed or distributed.
>
>
> > -----Original Message-----
> > From: Paul Taylor [mailto:PaulTaylor at winn dash dixie dot com]
> > Sent: Wednesday, 22 February 2006 23:14
> >
> >
> > I don't know how feasible that is, but you can use the
> > Firewall States table to see some of that sort of
> > activity for long-lived connections, like VPN. You can
> > even take a "Snapshot" of the current stats, then view
> > the delta of the stats moments later, so you can see
> > which IP Address is using the most bandwidth at a
> > given time.
> >
> > Paul
> >
> > -----Original Message-----
> > From: eduardo bermuller [mailto:bermuller at yahoo dot com]
> > Sent: Tuesday, February 21, 2006 7:48 PM
> >
> > Hi, it is possible  ad Traffic graph for monitoring
> > individual ip or mac adress of the users of the LAN..
>