Possible causes of flow duplicity in the case of 3rd party flow source devices and how to filter duplicity if flow source configuration cannot be changed.
Why do we see traffic duplicity in the analysis result? Why is the traffic bandwidth 2x greater than expected?
|Steps to Reproduce:|
Wrong flow interface or flow exporter configuration.
2nd flow – Input interface: Gi0/0/2 Output Interface Gi0/0/1
1. In case of monitoring multiple flow interfaces set all of them as input, or create a profile with channel filter to see only input traffic for the interface:
in if <x>
2. Create profile with channel filter:
(in if <x>) and (flowdir I)