Has anyone seen an issue where ToS is reported properly on session initiation but not within a flow?
For example, if a 10mb flow comes through, only the initiation/acks/etc. are reported within netflow as the proper ToS- The data flow (most of the data) itself is reported as CS0