[Epyon9283]

http://www.ntop.org/overview.html is what I'd use. It runs as a daemon so its running when users are logged out. Keeps quite detailed records.