For these types of tasks I like to bust out tshark and bash or throw together a ruby script using the pcap libraries.

Check this out:
Monitoring network traffic with Ruby and Pcap...