How can I see lengthy conversations using NetFlow? I'm looking for things like the user connected actively to a PCAnywhere session for 6 hours or the horse racing site for 2 hours - things of that nature - lengthy TCP conversations, not necessarily conversations consuming the greatest bandwidth.
Thanks in advance
Unfortunately, there is not a good way to accomplish in NTA today. This is something I have discussed with other users as well and I have captured it as a feature request for NTA.