I was under the impression that the information you want is lost once the
packets are being forwarded by the switch which is using some hashing on the
src and dst details which doesnt tie back to the L3 data in a one-to-one
basis...
Anyway, on a similar thread that doesnt explain why mac accounting cant be used
which I used to find very useful on non p2p interfaces...
Steve