Netflow has also been mentioned on this thread. The drawback is that Netflow
only works on cisco 72xx and 75xx platforms.
The GRF has a new function in the latest software that lets you record
the header of packets through interfaces, I've not used it, but at some
point I will. Also the GRF has tcpdump on it...
Neil