flowStartSeconds

flowEndSeconds

IP_SRC_ADDR

IP_DST_ADDR

L4_SRC_PORT

L4_DST_PORT

PROTOCOL

PACKETS_TOTAL

BYTES_TOTAL

For active flows, with every flow export, analyzer seems to sum up the counters. For example, lets say active timeout is 2 mins.

Export 1 : Total Packets = 100  (at 2)

Export 2: Total Packets = 150    (at 4)

Analyzer shows total packets for the flow to be 250, which is incorrect. Its supposed to be 150.

Thanks

Rahul