Can you get most of what you want with flow data? https://www.ntop.org/products/traffic-analysis/ntop/