Commercial Internet traffic monitoring products have proven incapable of handling the large volume of Internet traffic data collected by the DOE. "Flo" is a Linux-based tool that monitors Internet Protocol (IP) packet flows. A packet flow is any IP packet strean1lbetween the same se of IP addresses and ports with the same Internet protocol type. Flo reads tcpdump format files or attaches itself to an Ethernet interface.