I have update my ipt-parse tool to use an updated sqlite engine as well as performance, usability and stability improvements. Recap, this tool keeps track of Per Client bandwidth usage and now also adds Website monitoring. The website monitor requires more diskspace if you want to use it, so cifs or USB drive, but the bandwidth monitor WILL WORK standalone using jffs and keep about 3 months of bandwidth history (see the wiki below for details) The source code is available at launchpad here Prebuilt binaries for Tomato 1.23 and 1.28 as well as standard linux and windows binaries can be downloaded here v1.3.3 now adds the ability to read dns query entries in your /var/log/messages files and saves them per IP address to another table in the SQLite database. To setup website monitor in Tomato goto Advanced->DHCP / DNS Server and add the following line to dnsmasq: log-queries Now you can use ipt-parse to import dns queries and run sql queries per client IP to see which client is visiting which sites. USe this in combination with OpenDNS and you can pinpoint who visits those blocked websites from your network. For version info run: ./ipt-parse --version For help and examples: ./ipt-parse --help A wiki with detailed info exists here but it has not been updated to reflect this new release. For help etc, join me on IRC at freenode.net on #softhaus Enjoy.