After we have collected the Netflow information from the Cisco Device and presented the AS View as shown attached.

We found that the top 10 AS Number shown is the destination AS for the top 10 traffic volume or speed for the device. 

We like to know for the ManageEngine Netflow Analyzer:

1.      Can the AS number shown is the origin AS (i.e the source AS number) instead of the destination AS for the top 10 incoming traffic ?

2.      Is the top 10 traffic obtained in the AS View the sum of the In Traffic and the Out Traffic for each AS ?  Is the In Traffic/ Out Traffic the average for the Specify period (such as last 24 hours as in attached) ?

3.      Can it be separated for “In Traffic” and “Out Traffic” for the Top 10 AS respectively so that Top 10 “In Traffic” will show the corresponding origin AS and Top 10 “Out Traffic” will show the corresponding destination AS number ?