VPC Flow Logs: Not Captured Items

Not Captured Items

Prev Question Next Question

Question

Which of the following is not an item which is captured via VPC Flow Logs.

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

Answer - D.

The Frames element is not captured.

The below snapshot from the documentation shows a segment of elements which are captured.

For more information on VPC Flow Logs , please visit the below URL:

http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/flow-logs.html#flow-log-records
Field Description

version The VPC flow logs version.

account-id The AWS account ID for the flow log.

interface-id The ID of the network interface for which the log stream applies.

srcaddr The source IPv4 or IPv6 address. The IPv4 address of the network interface is always
its private IPv4 address.

dstaddr The destination IPv4 or IPv6 address. The IPv4 address of the network interface is
always its private IPv4 address.

srcport The source port of the traffic.
dstport The destination port of the traffic.

protocol The IANA protocol number of the traffic. For more information, go to Assigned Internet
Protocol Numbers.

packets The number of packets transferred during the capture window.

VPC Flow Logs are a feature provided by Amazon Web Services (AWS) that captures information about IP traffic flowing in and out of network interfaces in a Virtual Private Cloud (VPC).

The information captured by VPC Flow Logs includes the following items:

A. Source Address: The IP address of the device that initiated the connection. B. Destination Address: The IP address of the device that received the connection. C. Destination Port: The port number that the connection was made to. D. Protocol: The protocol used for the connection (TCP, UDP, etc.). E. Packets: The number of packets sent and received in the connection. F. Bytes: The number of bytes sent and received in the connection. G. Start Time: The time that the connection was initiated. H. End Time: The time that the connection was terminated.

Out of the given options, the item that is not captured by VPC Flow Logs is D. Frames. VPC Flow Logs capture IP traffic, which operates at the network layer of the OSI model, while Frames operate at the data link layer. Therefore, Frames are not captured by VPC Flow Logs.

In summary, VPC Flow Logs capture information about IP traffic flowing in and out of network interfaces in a VPC, including source address, destination address, destination port, protocol, packets, bytes, start time, and end time. Frames, on the other hand, are not captured by VPC Flow Logs since they operate at a lower layer of the OSI model.