difference in reported traffic

difference in reported traffic

im using the trial on several vlan interfaces and notice a difference in the full list of applications and then the list of involved ip addresses in a certain application. i read something on granularity  but that seems unable to explain a difference between 1.6 gig and 500mb in one day.

so when i check a certain application in the full list i notice in the traffic column it says 1.6gig and when i select that application i only end up with 500mb in the traffic column.

any clue what is going on here?

                New to ADSelfService Plus?