NetFlow is best described as what?

NetFlow is best described as what?

• A. A type of malware
• B. A hardware firewall
• C. A password management tool
• D. A protocol for summarizing IP traffic flows

Answer: (D)

NetFlow is a protocol that focuses on traffic flows rather than capturing every packet. Devices export flow records to a collector, summarizing each conversation between endpoints with details like source and destination IPs, source and destination ports, protocol, and timing and size information. This flow-based data lets you see who is talking to whom, when, and how much data is transferred, without recording full payloads. The result is a powerful view for traffic analysis, capacity planning, and security monitoring, helping you spot unusual patterns or high-volume destinations over time. It isn’t malware, a hardware firewall, or a password management tool—it's a method of collecting and analyzing network activity metadata. NetFlow has variants like NetFlow v5/v9 and IPFIX, but they share the same purpose: summarize IP traffic flows for analysis.

NetFlow is a protocol that focuses on traffic flows rather than capturing every packet. Devices export flow records to a collector, summarizing each conversation between endpoints with details like source and destination IPs, source and destination ports, protocol, and timing and size information. This flow-based data lets you see who is talking to whom, when, and how much data is transferred, without recording full payloads. The result is a powerful view for traffic analysis, capacity planning, and security monitoring, helping you spot unusual patterns or high-volume destinations over time. It isn’t malware, a hardware firewall, or a password management tool—it's a method of collecting and analyzing network activity metadata. NetFlow has variants like NetFlow v5/v9 and IPFIX, but they share the same purpose: summarize IP traffic flows for analysis.