Refer to the exhibit. Which type of log is this an example of?
A. IDS log
B. proxy log
C. NetFlow log
D. syslog
Which type of log is this an example of?
Refer to the exhibit. Which type of log is this an example of?
A. IDS log
B. proxy log
C. NetFlow log
D. syslog
key data is flow. Careful there is another question similar to this
the anwer is C!
C: Netflow Log
A typical output of a NetFlow command line tool (nfdump in this case) when printing the stored flows may look as follows:
Date flow start Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows
2010-09-01 00:00:00.459 0.000 UDP 127.0.0.1:24920 -> 192.168.0.1:22126 1 46 1
2010-09-01 00:00:00.363 0.000 UDP 192.168.0.1:22126 -> 127.0.0.1:24920 1 80 1
Reference: http://nfdump.sourceforge.net/
C. Netflow log – IDS log would have a Signature ID in the output.
C. NetFlow log