this is my first contribution in this great community. however, i have a good question.now we are using the NPM and i have noticed high utilisation on a certain node. how can i idfentfy the user that takes this bandwidth? for example, internet usae is very high and i could not reach the user how is using it? please help
NPM is only going to show you generic metrics based on ICMP and SNMP data. To get to the granularity you are requesting, you need Flow data.
NTA would be your most effective means of drilling down to the level you desire, while staying in the Orion family of products.