I have a question on traffic calculation. I read your comments on executing "ip ..." for each interface BUT it is impossible to set "ip route..." for interfaces that are not used but present. Details:
Let's start with the description of my router configuration: It has 4 fast ethernet switch ports (FastEthernet0-FastEthernet3) that are connected to single virtual lan port (Vlan1, intranet). It has one WAN port (FastEthernet4, internet) that is connected to DSL.
During the setup of NFA I was able to run "ip route-cache flow" command ONLY for Vlan1 and FastEthernet4 interfaces.
The problem is that I see only IN traffic for each interface and its OUT traffic is too low. I need to see the actual outbound traffic from FastEthernet4 and actual inbound traffic to FastEthernet4, but NFA shows me:
Router IP: 192.168.50.1
NetFlow Packets Rcvd: 342 Interface Name Status IN Traffic OUT Traffic Alerts VLAN 44% 227.73 Kbps 2% 7.8 Kbps - WAN 39% 199.71 Kbps 2% 10.09 Kbps -
WAN: Category Total Max Min Avg Traffic IN 3286.54 MB 5.58 MB - 22.82 MB Traffic OUT 130.83 MB 1.44 MB - 908.56 KB
VLAN: Category Total Max Min Avg Traffic IN 2121.5 MB 646.69 Kbps - 196.43 Kbps Traffic OUT 260.84 MB 531.75 Kbps - 24.15 Kbps
It seems to me that ACTUAL inbound traffic is 3286.54 MB and ACTUAL outbound traffic is 2121.5 MB
How to fix it?
Also I see only OUT traffic for IP groups (IN is zero).