Netflow NTA Sessionization?

artie_effim

This sounds like it should be simple to google for, but I cannot seem to find an answer:

 

given the simple secenario below:

 

HOST_SND (TCP_PACKET_port_nnn) --> RTR_1 --> RTR_2 --> HOST_RCV

Does Netflow (NTA) count the packet twice from the Summary view? so, if the packet size is 100b do I see a bandwidth/flow summary for port_nnn == 200b?

 

Thanks in advance.

artie

mcbridea

This is the issue of flow deduplication. The short answer is yes, each NetFlow exporter will report the traffic indenendently and it will sum at the higher levels.