IP address, Port, throughput

I’m trying to create a trigger that will provide all communication coming in and going out over 4 specific ports. The problem I am running into is displaying the data in a nice chart. It would be nice if I could just use the L7 protocol chart for those specific ports and it would tell me IP addresses. This trigger is almost like a netflow trigger as I need thoughput as well. Has anyone developed/created this and would care to share the trigger syntax?