well, it might only be a small part of it all, but there is a utility called "iptraf" that I think is very usefull. It works like a trafickmonitor, so you can see at any moment which trafick is running. Its a part of the redhat 7.3 distro. No problem to install it on ehe sme server.