Pktstat displays a real-time list of active connections seen on a network interface, and how much bandwidth is being used by what.
It partially decodes HTTP and FTP protocols to show what filename is being transferred, as well as X11 application names. Entries hang around on the screen for a few seconds so you can see what just happened.
It also accepts BPF expressions.