I setup a vm to collect net flows from my ddwrt enabled router, and used the http://nfdump.sourceforge.net http://nfdump.sourceforge.net package to collect and

I setup a vm to collect net flows from my ddwrt enabled router, and used the http://nfdump.sourceforge.net http://nfdump.sourceforge.net package to collect and parse them into a daily report of all tcp/Udp connections sorted by bytes... The real challenge is filtering out all the google and ec2 hosts that you come into contact with while using various services...