I am currently evaluating your product for the monitoring of Netflow data; to replace MARS as a netflow analyzer.  Source and Destination reports should be customizable within an IP Group to exclude either the source or destination of the IP Group.  This way to can get more than just interface utilization when you have high traffic within a /24 IP group.

Example:

Created IP Group [HOSTING]
10.255.255.0/24

Check IP Group Report Destination for Popular IP
Check Source for Popular IP

Since the IP Group Destination is 10.255.255.0/24, the top source's will be 10.255.255.0/24 if there is a response.  Therefor, all other IP's, public IP's in theory, would be placed in the "unaccounted" percentage of traffic.

Chris