We have two router Juniper SRX 220 H  (Junos 12.1R5.5) which send flows (j-flow) to Netflow Analyzer (ver 9700).
It is configured:


forwarding-options {

    sampling {

        input {

            rate 1;

            run-length 9;

            max-packets-per-second 7000;

        }

        family inet {

            output {

                flow-server 10.10.10.10 {

                    port 9996;

                    no-local-dump;

                    version 5;

                }

            }




On the router and in Netflow Analyzer sampling rate = 1 for this interface.

Netflow shows about 10 times less traffic then other monitoring tool which use snmp to draw traffic from the same interface. Why?