In this paper the authors mainly present some technical discussions on the identification and analyze of \"LAN user-sessions\". The identification of a user-session is non-trivial. Classical methods approaches rely on threshold based mechanisms. Threshold based techniques are very sensitive to the value chosen for the threshold, which may be difficult to set correctly. Clustering techniques are used to define a novel methodology to identify LAN user-sessions without requiring an a priori definition of threshold values.