While researching a reporting discrepancy in a NetFlow report from a competing product, we were advised that their NetFlow collector expects flows to be sent only every 60 seconds.
If the device sending flows is not configured to support this (ip flow-cache timeout active 1), then it affects accuracy in reporting; especially when reporting flow data in very tight intervals (like 1min).
Does NTA also expect to receive flows every minute?
Perspiring Minds need to know.
Yes, NTA expects flows to be sent every 1 minute. Otherwise data will be shown as spikes and blank spaces.