1 of 1 people found this helpful
Duplicate flows will be created if both ip flow ingress and ip flow egress are configured on multiple interfaces causing data to show double of actual bandwidth utilization. If using Flexible Netflow this would be or ip flow monitor MONITOR_NAME input and ip flow monitor MONITOR_NAME output.
Take a look at the article in the link below
The Top Endpoints resource shows more data by design since it shown individual Endpoints. This is due to Endpoints from a conversation being separated and assigning the total bytes to each one,
The Top Endpoint resource show more data ( double if all data is displayed) by design due to Endpoint in a conversation being separated.
In the charts below you can see that the bandwidth and the total bytes are doubled. In order for the charts to match you can either edit the Top Endpoint display as a Line Chart or ass the Top Transmitters and Top Receivers resource to the view. This will place the End Point in their respective direction.