The Traffic Volume on the Cleaning Device Is Different from That on the Detecting Device and the Latter Is Smaller
Possible Causes
Check whether the networking meets the following requirements: the detecting interface is directly configured on a physical interface (or Eth-Trunk interface) and that the cleaning interface is configured on a subinterface of a physical interface (or Eth-Trunk interface). If yes, the traffic volume on the detecting device is smaller than that on the cleaning device.
The possible causes are as follows: Traffic statistics reported by the AntiDDoS to the ATIC are collected based on Layer 2 (including the MAC header). The packet received by a subinterface is four-byte larger (size of a VLAN tag) than that received by a common interface. Therefore, the traffic volume on the detecting device is smaller than that on the cleaning device.