• SonicOS 8
• About SonicOS
  • Working with SonicOS
  • SonicOS Workflow
  • How to Use the SonicOS Administration Guides
  • Guide Conventions
• Dashboard
• System
  • Device
  • Summary
    • Traffic Distribution
    • Top Users
    • Insights
    • Observed Threats
    • Top Countries
      • Dropped
      • Bytes Received
      • Bytes Sent
  • Security Services
  • Network
    • Top Applications
    • Top Addresses
    • Top Users
    • Top Website Ratings
  • Threat
    • Top Intrusion
    • Top Virus
    • Top Spyware
    • Top Botnet
  • DNS Filtering
• Access Points
  • Feature Limitations
  • Access Point Snapshot
  • Client Association
  • Real-Time Bandwidth
  • Client Report
    • OS Type
    • Radio
    • Top Client
  • Real-Time Client Monitor
  • Client Report and Client Monitor Filtering
• Capture ATP
• Topology
  • Managing the Topology View
  • Managing Access Points in the Topology View
    • Editing an Access Point
    • Showing Statistics
    • Monitoring Status on an Access Point
    • Deleting an Access Point
• Real-Time Charts
• System Monitor
  • Using the Toolbar
  • Common Features
    • Legends
    • Tooltips
    • Changing Chart Format
    • Selecting IPv6/IPv4
    • Current, Minimum, Maximum Display
  • Multicore Monitor
  • Applications Bandwidth
  • Interface Usage
    • Packet Rate Monitor
    • Packet Size
  • Connection Usage
    • Active Connection Count
• Protocol Monitor
  • Enabling the Protocol Monitor
  • Using the Toolbar
  • Using Per-Chart Viewing Options
    • Legends
    • Tooltips
• User Monitor
• Bandwidth Monitor
• AppFlow
• AppFlow Report
  • Applications
  • Users
  • IP Addresses
  • Viruses
  • Intrusions
  • Spyware
  • Locations
  • Botnets
  • Web Categories
• AppFlow Monitor
  • Applications
  • Users
  • Web Activity
  • Initiator IPs
  • Responder IPs
  • Threats
  • VoIP
  • VPN
  • Devices
  • Contents
  • Policies
• CTA Report
• SD-WAN
• Monitoring SD-WAN
• Viewing SD-WAN Rules Connections
• Logs
• System Logs
  • Viewing System Logs
  • System Log Functions
  • Display Options
  • Filtering the View
• Auditing Logs
  • Managing the Audit Logs Table
    • Viewing Auditing Logs
    • Manually Emailing Auditing Logs
    • Exporting Auditing Logs
    • Refreshing the Auditing Logs
    • Displaying the Auditing Logs on the console
    • Auditing All Parameters During Addition
• Threat Logs
  • Viewing Threat Logs
  • Threat Log Functions
  • Display Options
• Tools and Monitor
• Using Packet Monitor
  • Benefits of Packet Monitor
  • How Does Packet Monitor Work?
  • Supported Packet Types
  • Configuring Packet Monitor
    • Configuring General Settings
      • Configuring General Settings
      • Configuring the Monitor Filter
      • Configuring Display Filter Settings
      • Configuring Logging Settings
      • Configuring Advanced Monitor Filter Settings
      • Configuring Mirror Settings
        • Starting and Stopping Packet Mirror
    • Monitoring Captured Packets
      • Starting and Stopping Packet Capture
    • Viewing Packet Monitoring Statistics
      • Capture Statistics
      • Local Mirror Statistics
      • Remote Mirror TX Statistics
      • Remote Mirror RX Statistics
      • FTP Statistics
      • Current Buffer Statistics
• Viewing Connections
  • Searching the Connections
  • Filtering the Connection Log
  • Connections Log Functions
• Monitoring Core 0 Processes
• Using Packet Replay
  • Single Packets
    • Packet Crafting
    • Packet Buffer
  • Replay Pcap File
    • Replaying an IP Pcap File
    • Replaying a MAC Pcap File
  • Captured Packets
    • About Captured Packets
    • Packet Detail
    • Hex Dump
• SonicWall Support
  • About This Document

Users

Using the View drop-down list, select Since Restart, Since Last Reset, or On Schedule.

These selections are defined as:

• Sessions — Number of sessions/connections initiated/responded
• Bytes Received — Number of bytes received by the user
• Bytes Sent — Bytes of data sent by the user

The report provides the following information:

• User Name — Name of the user, or UNKNOWN
• Count — The activity of this user in KBs of the total activity of users
• Percentage of Users — The activity of this user as a percentage of the total activity of users
• Blocked — Connections/sessions blocked
• Virus — Number of connections/flows with virus
• Spyware — Sessions/connections detected with spyware
• Intrusion — Number of Sessions/connections identified as intrusions
• Botnet — Sessions/Connections detected as botnetThe columns in the table can be customized so it displays only what you want to see.

Click the gear icon to select columns.