In a big network environment, both Source and destination inside the network Source can be outside or inside and destination can be inside or outside.
below situation can only help you, Source and destination reside inside the network.
if you are DHCP environment, you know where the lease comes from and you know the MAC Address of the device.
based on the IP address you can find easily where the user located if your network has segmented.
or else you need to start deploying Central DB to collect all the information using SNMP and store in Central DB to search based on the input.