# Discrepancy between source and destination host reported packet count in packetbeat **URL:** \ **Category:** Beats\ **Tags:** packetbeat\ **Created:** [June 24, 2020, 12:07pm UTC](https://discuss.elastic.co/t/discrepancy-between-source-and-destination-host-reported-packet-count-in-packetbeat/238454 "2020-06-24T12:07:22Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![mdyson](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mdyson/32/67291_2.png) [@mdyson](https://discuss.elastic.co/u/mdyson)\ **Post date:** [June 24, 2020, 12:07pm UTC](https://discuss.elastic.co/t/discrepancy-between-source-and-destination-host-reported-packet-count-in-packetbeat/238454/1 "2020-06-24T12:07:23Z")
Created a Kibana visualization counting the sum of packets from a source.ip to a destination.ip over time. There are documents from each host.hostname (source and destination) in the data set. When analyzing the counts in a spreadsheet and sorting the data by hostname I expected to see some similarity in the counts for a given time interval between packet counts reported by each of the two hostnames. Instead there is a large difference: the packet counts reported by one hostname are as many as three times as large as those for the same time interval reported by the other. I do not understand the difference. Am I not interpreting the data correctly? Any insight is appreciated. Thank you in advance. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 22, 2020, 2:07pm UTC](https://discuss.elastic.co/t/discrepancy-between-source-and-destination-host-reported-packet-count-in-packetbeat/238454/2 "2020-07-22T14:07:27Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.