To me, ingress traffic on an inside (LAN) interface should technically be traffic that is flowing OUT, since it is being received by the LAN on its way out of the network. Similarly, egress traffic on an outside (WAN) interface should also technically be flowing OUT, since it is being transmitted by the WAN on its way out of the network. Is this not correct for the views in NTA? Can someone clarify? The data in our NetFlow deployment is confusing the heck out of me.