Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR) v1.2InfrastructureMedium
A network operations team is monitoring network performance and needs to collect detailed information about IP traffic flows for billing, security analysis, and capacity planning. They require data such as source/destination IP addresses, ports, protocols, and byte counts for all conversations traversing key routers. Which network service provides this type of flow-based telemetry?
- ANetFlow
- BSyslog
- CSNMP (Simple Network Management Protocol)
- DIP SLA (IP Service Level Agreement)
Show answer & explanationAnswer & explanation
Correct answer: A. NetFlow
NetFlow is a Cisco-developed network protocol that collects IP traffic information as it enters or exits an interface. It provides detailed statistics on traffic flows, including source/destination IP, ports, protocols, and byte/packet counts, which is ideal for billing, security, and capacity planning.
Why the other options are wrong
- B. Syslog collects event messages and logs from devices for troubleshooting and auditing, not flow data.
- C. SNMP collects device-specific metrics (CPU, memory, interface status) but not detailed flow records of traffic.
- D. IP SLA actively measures network performance characteristics (latency, jitter, packet loss) between specific points, not comprehensive flow data.
NetFlow
A network protocol developed by Cisco for collecting IP traffic information. It provides statistics on network conversations flowing through a router or switch.
- Collects flow records (source/destination IP, ports, protocol).
- Used for network monitoring, security, billing, capacity planning.
- Requires a NetFlow collector to store and analyze data.
Memory trick: NetFlow is the traffic cop who counts every car and knows where it's going.