Systems and methods herein log traffic to and from a device on a network. Logging can occur using a metering device, router, proxy, or other elements. For example, a metering device operatively coupled to a routing device can log the traffic directed to and originating from a user device. Logged traffic can be analyzed to identify users, devices, and/or sessions. For example, an identifier unique to the user device in the session, a device type of the user device, and a specific user of the device during the session can be identified.