I have netflow enabled and outputting to influx via telegraf. Seems to be working fine but...
I don't really capture the data i expected so I probably misunderstand and I was hoping to get some help here.
What I want to visualise is internet usage (data rate) for a single client - for testing I am using MB/hr.
To achieve this I am using bytes_in where dest = ip and bytes_out where source = ip (sum grouped by hour)
but I am only getting a fraction of the data rate I expect.
Has anyone set this up and can explain what I am doing wrong?
and I have tried many different combos of bytes_in bytes_out dest / source etc