Which feature should the engineer use to gather the required information?

A network engineer is notified that several employees are experiencing network performance related issues, and bandwidth-intensive applications are identified as the root cause. In order to identify which specific type of traffic is causing this slowness, information such as the source/destination IP and Layer 4 port numbers is required.

Which feature should the engineer use to gather the required information?
A . SNMP
B . Cisco IOS EEM
C . NetFlow
D . Syslog
E . WCCP

View Answer

Answer: C

Explanation:

NetFlow Flows Key Fields

A network flow is identified as a unidirectional stream of packets between a given source and destination-­both are defined by a network-layer IP address and transport-layer source and des―nation port numbers. Specifically, a flow is identified as the combination of the following key fields: Source IP address Destination IP address Source Layer 4 port number Destination Layer 4 port number Layer 3 protocol type Type of service (ToS) Input logical interface

Reference: http://www.cisco.com/en/US/docs/ios-xml/ios/netflow/configuration/12-4t/cfg-nflow-dataexpt. html