Hello!

I'm looking for a program that will run on a promiscuous ethernet interface and produce a nice output of web sites visited by each host on the lan (by name, pulled form host headers). Hopefully this will also track web bandwidth per host as well.

I run several snort IDS boxes, as well as ntop and other network monitoring apps, but for specifically tracking web activity I'm not sure where to go. I'm decent with PHP, perl, mysql, etc, but an having trouble finding where to start on this project, and honestly hope that a program already exists for my needs.

I really appreciate any info you guys can provide!

Something like Chaosreader perhaps?