Since your running linux, you might check out ntop. I'm using it with a Tor protocol definition. Ntop is a bit bloated, but if your monitoring alot of services besides tor, it may be worth it. Homepage: http://www.ntop.org/ntop.html -circut