Can I log network access to docker containers?

I have a number of apps (run in docker containers), which are accessible to the network. I need to know when an app was last accessed.

Is there a way I can make docker log every network access?

(By default, docker logs app_foo only seems to show startup events and errors.)