SummaryWhy the internal and external port on CSV report is zero
OverviewThis deals with flows exported from the database. These can be from the CSV report or from the ODBC connector
When you extract data from the database the internal and external ports are "0". Find a snippet below
ResolutionWe identify flows by either: - app_id or - ports but not both.
So when an app_id is detected the ports are set to 0. See Reserved column above:
When app_id is not detected that's when you see ports listed. See "0" in Reserved column above:
This then allows flows between the same IPs for the same app to be aggregated. So working as expected.