If user A logs on at 9:30 and leaves at 9:45 and user B logs at 9:40 and leaves at 10:00, that would be two concurrent/simultaneous users. I would like to capture the incremental number of concurrent users over the lifetime of the log file, as unintresting as it seems ;-) I hope this makes sense.