NetFlow 11 Accuracy Discrepancy

Hi -

Im using NetFlow 11.0 with Cisco ASA5510 9.1.5.12 for our NetFlow analysis (NSEL).

I understand the statefull operation and behavior of the ASA, but what is interesting is the traffic counters doesnt match up.

If I search for all the captures under the forensics section this add's up to to volume of data consumbed, if I look under the report section or dashboard the data sumed for the same destination doesn't sum up, its allot more than what the forensics raw section report on.

This means the flows capsured are surely correct from the forensic section, but why under the report and dashboard this is wrong, I also tested this at times when the load was allot less on the Cisco ASA.

Please assist in further troubleshooting.

Kind Regards,

Jacques de Jager
MobileData
South Africa