[iso1631]

iftop (and ifstat) are part of my preseed file, along with tcpdump, (and htop/iostat/pidstat/mpstat)

For a router I'd also put ntopng on.