Atlassian uses cookies to improve your browsing experience, perform analytics and research, and conduct advertising. Accept all cookies to indicate that you agree to our use of cookies on your device. Atlassian cookies and tracking notice, (opens new window)
When classifying flows, we currently flip the src and dst address/ports based on the flow direction:
https://github.com/OpenNMS/opennms/blob/fb5526bc724df2ca92d01ceaa01918713758bb6e/features/flows/elastic/src/main/java/org/opennms/netmgt/flows/elastic/DocumentEnricher.java#L215
The direction (ingress vs egress) should have no bearing on application identification. They're simply a representation of layer 2 direction.