NTOP HTTP Reading

NethServer Version: 6.8 (Final)
Module: NTOP
Morning all
On my NTOP I have a user that used 3.5Gb of bandwidth on the receiving part of the HTTP, is there a way I can see what he was receiving that was 3.5Gb?

It should show you which protocols have been used