Packets/flow

It occasionally happens that I have connections on my network that don't transmit a lot of volume, but they transmit a huge amount of tiny packets, chewing up CPU on my routers. It would be nice if Netflow Analyzer had a report that could show source/destination information for IN/OUT flows sorted by number of packets, not just volume.

As it stands when I have an issue, I have to configure flow top-talkers on the affected router(s) and sort by packets to find these, but this doesn't show me anything after the issue is already resolved.

I searched the forum and saw a suggestion to add an IP group with the port/protocol info to see the number of packets something is taking, but the problem is that I don't always know which port/protocol is causing the problems.