After the ECA function is configured, ECA sessions and flow entries are generated for traffic that enters the switch. The ECA session flow entries are aged out after a certain period, and the aged flow entries are sent to the CIS server as metadata. Currently, ECA session flow entries can be aged out using the following methods: active flow aging and inactive flow aging.
Active flows refer to traffic that persists for a long period and is stable. Flow statistics are output periodically for active flows that are aged out. Inactive flows refer to traffic that persists for a short period. Once the traffic stops, the device immediately outputs flow statistics to save memory space.