What is a difference between SNMP and NetFlow?

Question

BlackTom AI · Accepted Answer

NetFlow is a flow-export technology that records per-flow metadata (source/destination IP, ports, protocol, start/end timestamps, bytes, packets, TCP flags, next hop), whereas SNMP is a device-management protocol that exposes MIB objects such as interface counters, CPU, memory, and error counters.

Relevant knowledge points:
- NetFlow (and similar flow technologies) exports detailed flow records describing individual conversations across the network, enabling analysis of top talkers, applications, per-flow byte/packet counts, and timing.
- SNMP (Simple Network Management Protocol) provides access to scalar and tabular device statistics (e.g., ifInOctets/ifOutOctets) via polling or traps; it reports aggregated counters, not per-conversation flow records.
- Sampling, polling intervals and counter wrap affect the granularity of SNMP-derived traffic metrics.

Step-by-step reasoning:
1. What NetFlow provides: For each flow it can report 5-tuple (src/dst IP, ports, protocol), bytes/packets per flow, timestamps — enabling detailed traffic accounting and forensic analysis.
2. What SNMP provides: Interface-level counters (total octets/packets in/out), errors, and device resource metrics. To derive traffic per conversation with SNMP you must poll frequently and still only get aggregate interface totals.
3. Compare granularity: NetFlow = per-flow granularity; SNMP = aggregate interface/device granularity.
4. Practical consequence: NetFlow supports identifying specific conversations and applications; SNMP is good for overall utilization, health, and device metrics.

Why the correct answer is correct:
NetFlow’s per-flow records deliver much finer traffic detail than SNMP’s aggregated counters, so the statement “NetFlow collects more detailed traffic statistics on IP networks than SNMP does” is accurate.

Why the other options are incorrect:
- Option 1: SNMP is primarily pull-based (Get/GetNext); traps are optional pushes — NetFlow is typically push (export) — so the statement is reversed/incorrect.
- Option 3: SNMP can collect many device performance indicators (CPU, errors); NetFlow focuses on traffic flows, not device CPU/errors.
- Option 4: NetFlow is commonly used for IP accounting and billing; SNMP is less suited for per-flow accounting.

Final confirmation: The correct answer is “NetFlow collects more detailed traffic statistics on IP networks than SNMP does.”

What is a difference between SNMP and NetFlow?单项选择题

类似问题

MMS was originally developed for testing networks.

Match the DHCP Era with Its Characteristics 1: DHCP 2: BOOTP 3: RARP

6- Application “File transfer” using application layer protocol HTTP and underlaying transport protocol UDP.

What is the purpose of protocols in data communications?

A project has a required return of 12.6 percent, an initial cash outflow of $42,100, and cash inflows of $16,500 in Year 1, $11,700 in Year 2, and $10,400 in Year 4. What is the net present value?

更多留学生实用工具

智能学习助手

风格化写作助手

论文查重助手

文献引用助手

课堂转译助手

课堂笔记助手

Quiz搜索助手

学校历年真题

智能刷题助手

智能匹配练习

希望你的学习变得更简单