A network operations center team notices periodic bandwidth spikes on a branch office WAN router interface. While SNMP counter polling indicates overall interface throughput, it fails to reveal which internal endpoints or protocols are responsible for the spikes. Which network performance telemetry technology should be implemented on the router interface to capture per-flow traffic details, including source and destination IP addresses?
- IPFIX (IP Flow Information Export) flow telemetryAnswer
- BSNMPv3 MIB queries using the authPriv security level
- CSyslog event logging using UDP transport
- DActive ICMP jitter SLA probing
Answer
IPFIX (IP Flow Information Export) flow telemetry is the correct choice because it exports granular flow data (including source/destination IP addresses, port numbers, and byte counts) required to identify specific endpoints and applications causing traffic spikes.
IPFIX (IP Flow Information Export) provides flow-level granularity by summarizing packet streams based on key fields (source IP, destination IP, source port, destination port, and protocol). This allows network engineers to identify top talkers and specific application usage during throughput anomalies.
Step-by-Step Solution
Key Concept
Flow-Based Telemetry vs. Device State/Metric Monitoring
Estimated Time:1m 30s