Which data type is necessary to get information about source/destination ports?

Statistical data involves aggregated metrics and summaries, which do not inherently provide the specific source and destination port numbers of individual connections.

Session data describes an active communication session, which does include port information, but 'connectivity data' is a broader term that encompasses all connection-related metadata, whether active sessions or connection attempts, making it a more fundamental data type for port information.

Connectivity data, often represented as flow records (e.g., NetFlow, IPFIX), directly contains the 5-tuple information including source IP, destination IP, protocol, source port, and destination port, which is essential for understanding network communication paths.

Alert data typically indicates a security event or anomaly and may reference port numbers within the alert description, but it is not the primary data type for systematically collecting comprehensive port usage information.