How to see user traffic details?

How to see user traffic details?

Hello, we testing NFA 9 and we don't understand some traffic details. I need some comments, pls.

NFA working good, capture netflow traffic, i see top source and destination ip's, but when i try to "search" by ip, i don't get same result, see screenshot for details. 

Here is Destination traffic for 89.184.27.98 is 2.59GB



But here is only 1,3 Gb. Why this data is different?

                New to ADSelfService Plus?