A network engineer is notified that several employees are experiencing network performance related issues,
and bandwidth-intensive applications are identified as the root cause. In order to identify which specific type of traffic is causing this slowness, information such as the source/destination IP and Layer 4 port numbers is
required. Which feature should the engineer use to gather the required information?
B. Cisco IOS EEM
Correct Answer: C
NetFlow Flows Key Fields
A network flow is identified as a unidirectional stream of packets between a given source and destination–both are defined by a network-layer IP address and transport-layer source and des–nation port numbers.
Specifically, a flow is identified as the combination of the following key fields: