No announcement yet.

Interpreting Netflow Data

  • Filter
  • Time
  • Show
Clear All
new posts

  • Interpreting Netflow Data

    We just got our ISP to set up netflow on our router and after setting up my netflow application (ManageEngine NetFlow Analyzer). It appears to show the traffic going in the wrong direction. I select the serial interface and then select to view "application" data on the Application tab. I see the http traffic stats and they appear to show http traffic inbound on the interface instead of outbound. This http traffic should be outbound on the serial interface from internal web clients to external web servers. I see the inverse when looking at the outbound statistics, it appears to show rdp traffic outbound instead of inbound to our TS farm. Am I misunderstanding the concept of in and out? Is it based on the "perspective" of the router or the interface?