Associating network flows with user and application information