tcpflow compiles and runs fine on arm by simply adding arm in the keywords. It is in debian stable armel, and the debian patches only add functionality (no bugfixing), furthermore it has only one dependance and no use flags, so it is pretty safe to put it in arm (or at least ~arm).
~arm done, reopen in 30 days if you want it stable