210-250 · Question #10
Which data can be obtained using NetFlow?
The correct answer is A. session data. NetFlow collects IP flow metadata that represents session-level data including source/destination IPs, ports, protocol, and byte counts. It does not capture full packet content or application-layer logs.
Question
Which data can be obtained using NetFlow?
Options
- Asession data
- Bapplication logs
- Cnetwork downtime
- Dreport full packet capture
How the community answered
(29 responses)- A93% (27)
- B3% (1)
- C3% (1)
Why each option
NetFlow collects IP flow metadata that represents session-level data including source/destination IPs, ports, protocol, and byte counts. It does not capture full packet content or application-layer logs.
NetFlow exports metadata about network conversations - each flow record represents a session identified by the 5-tuple (source IP, destination IP, source port, destination port, protocol) along with timing and volume statistics. This constitutes session data, making it valuable for network behavior analysis, anomaly detection, and traffic baselining without the storage overhead of full packet capture.
NetFlow operates at the network layer and does not parse or record application-layer log content.
NetFlow does not inherently measure or report network downtime - it records traffic flow records only when traffic is present.
NetFlow captures only flow-level metadata (headers and statistics), not the full packet payload, which distinguishes it from packet capture tools like Wireshark.
Concept tested: NetFlow data types and session metadata
Source: https://www.cisco.com/c/en/us/products/ios-nx-os-software/ios-netflow/index.html
Topics
Community Discussion
No community discussion yet for this question.