In some situation NetFlow Statistics are processed twice, even when you take care of avoiding duplication.
Since it is not possible to prevent the duplication of statistics at the hardware level, duplication must be detected in the application that analyses the NetFlow statistics.
- Does NTA provide NetFlow statistics filters based on Source/Destination IP address / Ports or "next hope" fileds information ... ?
- Any workaround to help filter out duplicated stats ?
Is there any update on handling NetFlow de-duplication?
If we build resilient & multi-feed NetFlow sources will Orion's NTA de-duplicate the feeds or will the data be stored twice?