If you have a decent router, you can configure Netflow and send flows to a collector and then you can ingest in an ELK or similar platforms for further analysis. It requires a bit of work, but combined with DNS logs it's the best way to monitor the traffic