Which feature should the engineer use to gather the required information?

A network engineer is notified that several employees are experiencing network performance related issues, and bandwidth-intensive applications are identified as the root cause. In order to identify which specific type of traffic is causing this slowness, information such as the source/destination IP and Layer 4 port numbers is required.

Which feature should the engineer use to gather the required information?
A . SNMP
B . Cisco IOS EEM
C . NetFlow
D . Syslog
E . WCCP

View Answer

Answer: C

Explanation:

NetFlow Flows Key Fields

A network flow is identified as a unidirectional stream of packets between a given source and destination-­both are defined by a network-layer IP address and transport-layer source and des―nation port numbers. Specifically, a flow is identified as the combination of the following key fields:

Source IP address

Destination IP address

Source Layer 4 port number

Destination Layer 4 port number

Layer 3 protocol type

Type of service (ToS)

Input logical interface

Reference: http://www.cisco.com/en/US/docs/ios-xml/ios/netflow/configuration/12-4t/cfg-nflow-dataexpt. html