I think it would be great if there were IP reputation scores in my conversational charts, top transmitters, top receivers, basically any chart that had IP information but only for the IP's that are not RFC1918 addresses(obviously). One thing I have noticed with Netflow data is half the time you have charts that bring back IP's and no DNS name. I think IP reputation could be really helpful information and there are a lot of free reputation databases out there.
Perhaps a little number in a color coded box could be placed next to the IP's as a flag, level 1 through 5 for example. 5 being critical and 1 being information/zero threat.
Imagine you are looking at your TOP XX NetFlow chart and you see 40gigs of data going to an IP with an IP reputation score of 5.... that seems like information you would want to have.
example:
b-
