NFA not using the timestamp fields

NFA not using the timestamp fields

I'm developing an implementation of Netflow in a switch.

Anyway I'm using Netflow Analyzer to "validate" my work and check if my netflow export packets are correctly formed. Everything works just fine, but I have the impression that Netflow Analyzer ignores the timestamp fields of my packets.

Let's take an example:
Imagine a continuous flow starting at 00:00. After 30 minutes, the flow is exported because of the "active timeout". The start timestamp of the netflow export is 00:00 and its finishing time 00:30.
Let's just say the flow represents a transmission of 30 Mbits of data. Instead of a nice, meaned data transfer of 1 MBits/min for 30 minutes, Netflow Analyzer shows me a peak of bandwidth occuring at 00:30.

Can you confirm this behavior?







                New to ADSelfService Plus?