Which statement is correct regarding NBAR and NetFlow?
A.
NetFlow uses five key fields for the flow.
B.
NBAR examines data in Layers 3 and 4.
C.
NetFlow examines data in Layers 3 and 4.
D.
NBAR examines data in Layers 2 through 4.
E.
NetFlow examines data in Layers 2 through 4.
Explanation:
Network Based Application Recognition (NBAR) is the mechanism used by some Cisco routers and switches to recognize a dataflow by inspecting some
packets sent.
NetFlow is a feature that was introduced on Cisco routers that provides the ability to collect IP network traffic as it enters or exits an interface.
Netflow works between 3 and 4
Layer Flexible Netflow workd from Layer 2 to 7 inspect payloadNBAR works 3 to 7
Specifically, a flow is defined by the combination of the following seven key fields:
Source IP address
Destination IP address
Source port number
Destination port number
Layer 3 protocol type
Type of service (ToS)
Input logical interface