The platform is connected to process mirrored traffic typically in case of using DPI as a pre-filter for Lawful Interception.

Also, this mode can be used to collect Netflow analytics, IPFIX (Clickstream and SIP), to filter by blacklist and to notify subscribers via WEB.

Since in this mode DPI competes with the original site in response speed and cannot suppress the original request during filtering, there may be omissions in filtering due to packet loss in the line while delivering to the subscriber. To reduce this probability use the setting

emit_duplication=3

where 3 stands for the number of retries of a packet with a redirect or blocking.