Submit a ticketCall us

Get a crash course on Network Monitoring delivered right to your inbox
This free 7-day email course provides a primer to the philosophy, theory, and fundamental concepts involved in IT monitoring. Lessons will explain not only how to perform various monitoring tasks, but why and when you should use them. Sign up now.

Home > Success Center > Netflow Traffic Analyzer (NTA) > Ingress bytes, egress bytes, bytes through, and total bytes in NTA

Ingress bytes, egress bytes, bytes through, and total bytes in NTA

Table of contents

Overview

This article discusses the difference between ingress bytes, egress bytes, bytes through, and total bytes in NTA.

Environment

All NTA versions

Detail

Every Flow includes various data, among others the following details:

  • Ingress interface - the interface through which the Flow enters a router/switch where NTA is listening.
  • Egress interface - the interface used for leaving the router/switch.
  • Bytes - the amount of bytes that have been transferred by the Flow.

NTA resources often display ingress bytes and egress bytes:

  • Ingress bytes are bytes coming into the router/switch via the ingress interface. 
  • Egress bytes are bytes leaving the router/switch via the egress interface.

NTA reports display total bytes and bytes through:

  • Total bytes are calculated by adding up bytes coming into the router/switch via the ingress interface and bytes leaving the router/switch via the egress interface. However, NTA displays flow data only for interfaces with enabled flow monitoring. If you enable monitoring only on one of the interfaces (ingress or egress), only the bytes for the monitored interface are calculated and the total bytes value will be the same as bytes through.
  • Bytes through are calculated as the bytes a flow is transferring; they are the bytes that enter the router/switch through the ingress interface and leave it through the egress interface. The amount of bytes that enter the router should be the same as bytes leaving the router, and so the bytes value from the flow is taken only once. This value is the same, regardless of whether flow monitoring is enabled for both ingress and egress interface, or only for one of them.

Add the appropriate columns to see the ingress/egress bytes information in a report. For more information, see Adding content to a Web-Based Report Column.

For more information about ingress/egress/both options in NTA resources, see How Do Ingress/Egress/Both Options Influence the NTA Top xx Endpoints Resource.

Last modified
02:08, 6 Apr 2017

Tags

Classifications

Public