We are logging to a syslog server on level informational. I see a byte count logged with each connection and I'm trying to understand what it means.
Is it the sum of in+out traffic for the connection? Or is it only one direction? Is there a way to determine bytes counts for both directions (like netflow)?
We are using version 6.3, but are in a position to upgrade if that will help meet our above requirements.