Glossary: Logs and Data Sources for Investigations

NetFlow

Also written: NetFlow version 9

The flow-record format first built into Cisco routers; version 9 uses templates and is described in RFC 3954. On the exam it means the same idea as IPFIX.

Where the book teaches it

Chapter 3: Scans, Reports, Flow Records and Footage
Chapter 6: What's next

Related terms

IPFIX (Internet Protocol Flow Information Export)Flow record sFlow