I was wondering if anyone had any recommendations for a traffic analyzer that will read from a syslog file, and not just by binding to the network interface in promiscious mode. I was hoping to find a program that will show traffic usage by IP address, many of them just show the total traffic statistics.