The following was found on the forum somewhere:
----
Here are the SQL statements I used to explore http traffic from a particular client:
SET search_path = reports, events;
SELECT W.time_stamp, R.host, L.uri
FROM n_http_req_line L
INNER JOIN n_http_evt_req R
ON L.request_id = R.request_id
INNER JOIN webpages W
ON L.request_id = W.request_id
WHERE W.c_client_addr = '***** IP ADDRESS ****'
ORDER BY W.time_stamp DESC;
Simply replace the ***** IP ADDRESS **** with the local ip address (eg. 192.168.1.x) that is of interest to you.