net-acct | User-mode IP accounting daemon | Mehr ...
This package logs network traffic. It provides a daemon (nacctd) that logs all traffic passing the machine it runs on (similar to what tcpdump does). . Capability is provided to associate traffic to slip/ppp users in case you run a slip/ppp server.