The only flow capabilities in LEM right now are to collect flows and display top talker info (by bytes or packets per host or port). There hasn't been much drive to utilize flow data further, and some question of what would be more well suited to do in NTA/NPM and raise to LEM so the systems can work better together.
↧