For the complete documentation index, see llms.txt. This page is also available as Markdown.

Bidirectional Flow Support

How does ElastiFlow handle bidirectional flows (RFC 5103)?

QUESTION

How does ElastiFlow handle a flow exporter that supports bidirectional flow records (RFC 5103), where two directions of traffic are expressed in a single record?

ANSWER

The collector will produce two unidirectional records, one for each direction. This allows these records to be processed and analyzed in the same manner as unidirectional flows.

Last updated

Was this helpful?