For one offs this may be easier:
Code:
echo '/usr/sbin/iftop -n -N -i em1 -t'|/usr/bin/at 08:00
Note iftop uses ncurses to display data and that may not be what you want, hence the "-t".
Once you kill the job an email will be sent with all the logged data in it.
If that isn't what you want or need then see 'man tcpdump' and capture data first and parse it later.