Hi @AnotherRon, The main difference is the Netflow data is only the traffic that hits the MX's CPU. If the traffic is hardware switched only, you will not see that in the Netflow collector graphs. As an example if some traffic is send within the same VLAN there is no need to route or NAT it thus is not hitting the MX's CPU and will not show in your Netflow collector. Here is a link to the document describing how it works. https://documentation.meraki.com/MX/Monitoring_and_Reporting/NetFlow_Overview#NetFlow_Export_Scope I hope that make sense.
... View more