Look at my project (link in my signature) using Splunk to monitor various parameters from the Router.
One graph uses IP accounting to graph bandwidth used pr user.
There you can select all users, singel user, time period etc.
.
Treaffic.jpg
You do not have the required permissions to view the files attached to this post.