i want to monitor the egress interaface(tx) of the firewall and identify the users bandwidth, visited websites, who is having the most bandwidth for internet etc. i am planning to do this by port mirroring the port which is going to the firewall.
the mirrored port will be connected to the monitoring system, so that what ever tx traffic goes to the firewall goes to the monitored system.
Can anyone tell the best open source software that can do this. with graphs, user identification via IP address, the sites visted etc