Separating incoming and outgoing traffic for a more fine-grained analysis