...люди помогите!!!!! посоветуйте лог трафика

Ставишь на сервер IPAC. Если на серваке крутится Apache c PHP,
то получать статистику можно через HTTP с помощью следующего
скрипта:

<script language="php">
echo "<font color=\"#00aaaa\">Сегодня:</font>\n";
system("ipacsum -t \"today\" | grep \"iav\"");
echo "<hr><font color=\"#00aaaa\">За месяц:</font>\n";
system("ipacsum -s 1M | grep \"iav\"");
echo "<hr>";
</script>

P.S. "iav" - входит в доменное имя моих машин (x.iav), которые,
в свою очередь, описываешь в конфиге /etc/ipac.conf:
#	host1.iav|in|eth0|tcp|proxy.iav|host1.iav
#	host2.iav|in|eth0|tcp|proxy.iav|host2.iav

#man ipacsum

IPACSUM

Section:  IPAC  (8)

NAME ipacsum - summarize, display and compact ip accountingi nformation

SYNOPSISipacsum [ --dir, -d DIR ] [ --endtime, -e time ] [ --exact, -x ] [ --filter, -f regex ] [ --gif DIR ] [ --gif-asis ] [ --gif-average-curve N ] [ --gif-caption-in-index ] [ --gif-height N ] [ --gif-index FILE ] [ --gif-no-average ] [ --gif-normalize SEC ] [ --gif-use-smallfont ] [ --gif-width N ] [ --graph, -g ] [ --help, -h ] [ --interval, -i n ] [ --replace, -r ] [ --show-run-progression ] [ --starttime, -s time ] [ --timeframe, -t timeframe ] [ --version ]

DESCRIPTIONipacsum is part of the ipac linux ip accounting package. 

ipacsum first reads files from the directory /var/log/ip-acct. The files in this directory contain ip accounting counter information and are created by fetchipac(8) on a regular basis or by ipacsum itself (see below). By default, all files are read. 

Then, it displays a summary of the data from all these files. For each ip accounting rule that appears in one of the input files, it displays a number which represents the total bytes which have been counted by the rule. For values over 9999 bytes, the count is displayed in KBytes with a "K" appended (1024 Bytes = 1 KByte). For values over 9999 KBytes, the count is displayed in MBytes with a "M" appended (1024 KBytes = 1 MByte). For values over 9999 MBytes, the count is displayed in GBytes with a "G" appended (1024 MBytes = 1 GByte). 

Additionally, the host name, the current time and the creation times of the oldest and the newest input files are printed.