My network topology is like below
user ----FW A----Riverbed Steelhead A----WAN router A =================WAN router B ---- Riverbed Steelhead B---- FW B---- Datacenter
I am still very confused when using Steelhead how we can interpret the statistics on Netflow correctly.
Below is the Netflow statistics of WAN router A and Riverbed Steelhead A, and we are seeing the WAN interface of both devices.
Let's focus on port 445. For the ingress(incoming) traffic , Router A is having 308.3MB, and Steelhead is having 156.3MB.
1) I think the actual amount of traffic across the WAN network for port 445 is 308.3MB, correct?
2) yet , why Steelhead is always showing a lesser value for ingress ?
3) For in-path optimized traffic, it is using port 7800, so the rest services showing here are passing through traffic?
4) I searched on the Internet, most of the people say when using Steelhead in your network, you can only have the correct Netflow data by monitoring Sttelhead.
However, shouldn't we use Netflow data from the WAN router to see the bandwidth utilization of the WAN link ?
Please kindly help, can't find the correct answer anywhere. Thanks in advance.
