Suppose that I install an application (e.g. mySQL), which listens on a particular port (e.g. 3306). It would be useful to be able to add a watch to a particular application, so that all the data that appears in
Firewall->Common Tasks->View Active Connections
in this relation to this application is stored for each and every session, in some log file.
Then at the end of the week I could look at this log file and see all the bytes in and bytes out performed by mySQL for the various sessions over the week.