User's Guide

ExtremeAnalytics Bidirectional Flow Table
97 of 218
duration of a bidirectional flow may be greater than or less than the period of
time indicated by the First Seen and Last Seen Time. This is because there
may be times during that time period when no flow is active or when several
flows are active at the same time.
NOTE: Bidirectional flows may be greater than the period of time between the First Seen and Last
Seen Time columns because they display the sum of all flow records for a client and a server
on a server port. For a flow that lasts for 60 seconds, there are two flow records (a client to
server flow and a server to client flow), so the total duration may exceed 60 seconds.
Multiple simultaneous connections from the client to the same server port (e.g. multiple
browser windows open to a web-based email client) can also increase the duration.
Rate
The average bandwidth for the flow based on the total flow duration.
Because bandwidth calculations are based on the total duration (not on the
First Seen and Last Seen Time), they represent the average throughput for
each flow considered separately, not as an aggregate.
Tx Packets
The number of packets transmitted for this flow. For flows collected via
Application Telemetry, this number may be estimated.
Rx Packets
The number of packets received for this flow. For flows collected via
Application Telemetry, this number may be estimated.
Tx Bytes
The number of bytes transmitted for this flow. For flows collected via
Application Telemetry, this number may be estimated.
Rx Bytes
The number of bytes received for this flow. For flows collected via
Application Telemetry, this number may be estimated.
Traffic Records
The number of records received in each flow.
Flow Source
The IP address of the NetFlow source switch, Application Telemetry source
switch, or wireless controller sending the NetFlow data to the NetFlow
collector.
Input Interface
The interface receiving the flow on the NetFlow sensor.