I believe NBAR stats are accessible via SNMP, so you can use MRTG to graph application utilization.
http://vermeer.org/display_doc.php?doc_id=6