Deduplication in GigaFlow

Overview

GigaFlow can deduplicate flows although it is not recommended by default. Duplicate flows can be used for forensic analysis, e.g. in the situation where an IP pair is received by a router on an ingress port, deduplication reduces the information available for trouble-shooting.

Changing the Default Settings

GigaFlow's deduplication behaviour can be modified at System > Global > General.

Process Duplicate Flows	Ignore Duplicates on Summaries	Result
Yes	Yes	This is the default setting. GigaFlow will fully process and store the duplicates but the byte/flow/packet count against interfaces will not be affected by the duplicates. This is important for capacity planning.
No		GigaFlow will disable all processing of duplicate flows, i.e. no storage, no forensics, no summaries. These will be accounted for as increments to the duplicates counter on the device
Yes	No	GigaFlow will fully process and store the duplicates and the byte/flow/packet count against interfaces will be affected by the duplicates. This is not good for capacity planning.