What are the three things that the Netflow uses to consider the traffic to be in a same flow?

The correct answer is A. IP address C. Port numbers D. Protocol type. NetFlow defines a flow using a set of key fields. From the options given, the three primary identifiers are: (A) IP address - both source and destination IP addresses uniquely identify the endpoints of a flow. (C) Port numbers - source and destination Layer 4 port numbers…

Network Device Management

Question

What are the three things that the Netflow uses to consider the traffic to be in a same flow?

Options

AIP address
BInterface name
CPort numbers
DProtocol type
EMAC address

How the community answered

(25 responses)

A
88% (22)
B
8% (2)
E
4% (1)

Explanation

NetFlow defines a flow using a set of key fields. From the options given, the three primary identifiers are: (A) IP address - both source and destination IP addresses uniquely identify the endpoints of a flow. (C) Port numbers - source and destination Layer 4 port numbers distinguish between different applications or sessions between the same pair of hosts. (D) Protocol type - the Layer 3/4 protocol (e.g., TCP=6, UDP=17, ICMP=1) is required because the same IP pair can communicate over different protocols. The full NetFlow 7-tuple also includes ToS byte and input interface, but MAC address (E) is a Layer 2 concept not used in NetFlow flow classification, and interface name (B) is an input field but not one of the three core flow-matching keys tested here.

Topics

#NetFlow#flow classification#IP address#port numbers

Community Discussion

No community discussion yet for this question.

Full 200-101 Practice