Bandwidth monitoring with flows and packet sniffing