# Elastic Netflow integration (discrepancies with Nfsen)

**URL:** <https://discuss.elastic.co/t/elastic-netflow-integration-discrepancies-with-nfsen/384502>\
**Category:** Elasticsearch\
**Created:** [January 13, 2026, 10:59am UTC](https://discuss.elastic.co/t/elastic-netflow-integration-discrepancies-with-nfsen/384502 "2026-01-13T10:59:04Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![duckasylum](https://avatars.discourse-cdn.com/v4/letter/d/a5b964/32.png) [@duckasylum](https://discuss.elastic.co/u/duckasylum)\
**Post date:** [January 13, 2026, 10:59am UTC](https://discuss.elastic.co/t/elastic-netflow-integration-discrepancies-with-nfsen/384502/1 "2026-01-13T10:59:04Z")

</div>

I have a few Netflow collectors running pmacctd to collect netflow traffic. I send v9 to Nfsen and v10 (IPFIX) to an elastic agent with a configured netflow integration. My problem is that Nfsen shows close to 10 times more flows per filter than Elastic. I suspected that the agent was dropping flows but the agent metrics dashboard shows practically 0 dropped events. Does someone have any ideas what might cause such differences? (Agent version 8.15.2, Fleet version 8.18.1, Netflow integration version 2.24.0 and Elasticsearch/Kibana version 8.18.1)