Issue:
Using NFA 9.3.x, there is double traffic displayed in the NFA reports for some interfaces.
Environment:
NFA 9.3.x on win2008/win2012 with CISCO routers using flexible netflow
Cause:
egress + ingress traffic is displayed instead of ingress traffic or egress traffic
Resolution:
You must add in the flexible netflow config the field direction:
match flow direction