ulog-acctd seems pretty nifty for aggregating network flow statistics.
I’ve submitted some patches so it can build as a redhat package, and also dump the stats when it receives a signal. it’s nice for a stats processor to be able to signal to ulog-acctd to dump the stats now! type of thing.
No much seems to be going with the mailing list apart from eastern spam.