Inconsistent NetFlow Analyszer Data

Inconsistent NetFlow Analyszer Data

and the tunnel interface. There is also an MRTG Server monitoring this link.

Fa0 is the outside interface and is only monitoring incoming traffic. It can only see the encrypted tunnel traffic. Fa1 is the inside interface and is monitoring traffic in both directions. Both Fa1 and the tunnel interface can see the individual application traffic passing through them.

The problem is that there is a large discrepancy between both the MRTG data and the outside interface when compared with the inside and tunnel interfaces. This is most noticeable during the back up period when the outside interface registers speeds around 750Kbps but the inside interface shows speeds of only 50Kps.

Here are the daily graphs for the same time period. The backup is between 20:00 and 22:00.

Fa0 � Outside interface


Fa1 - Inside interface


MRTG Graph - From switch port attached to Fa1


The client that uses this link is interested in the application information that Netflow Analyzer can provide. However, with such a large discrepancy in some of the traffic levels, it�s impossible to verify the validity of this information.

Does anyone have any suggestion on what I can change to get a more accurate picture of the traffic?


















                New to ADSelfService Plus?