AFP Log Analysis

You can read a lot of things about AFP CPU activity in OS X Server and how it can be affected by .DS_Store files, network home directories, number of concurrent users, and so on. But I have searched in many places for an AFP log analysis tool and come up emptyhanded. I’d like something that can go through the AFP access log and report who was responsible for given activity, by logged-on user and/or IP address. If AFP usage starts to spike, I’d like to analyze the last few minutes and see what has changed. I’d like to see who might be working on large files directly off the server, who is having problems with a .DS_Store file, who might be rotating big screen-saver pictures every five seconds from a network home, what kind of files are being opened or created (temp files, caches, PDFs, whatever). In short, I’d like to see a breakdown of the AFP CPU usage and who’s responsible.

I’d also like to do historical log analysis to get the same data.

There were tools to do this under AppleShare IP. I can’t find anything for OS X Server besides Web log analysis.

Ideas or recommendations? I’m not a scripting guru.