Skip to main content
Version: 6.4

Bidirectional Flow Support

How does ElastiFlow handle bidirectional flows (RFC 5103)?

QUESTION

How does ElastiFlow handle a flow exporter that supports bidirectional flow records (RFC 5103), where two directions of traffic are expressed in a single record?

ANSWER

The collector will produce two unidirectional records, one for each direction. This allows these records to be processed and analyzed in the same manner as unidirectional flows.