VPC Flow-Log

Question 1

VPC FLowLog captures Packets, Segments, or data?

Answer 1

only captures Packet meta-data and not data and not a packet data content.

Packet content inspection can only be done using packet sniffers

Question 2

Flowlogs Architecture

Answer 2

Attaching Virtual Monitors to a VPC

It can be applied to

• VPC Level
  Network Interface in every subnet within that vpc
• Subnet Level
  every Interface within a Particular Subnet
• Network Interface Level
  Directly on a Network interface

Question 3

Flowlogs Latency

Answer 3

Flowlogs is not realtime

Question 4

Vpc Flowlog Integrations

Answer 4

1. s3
2. CLoudwatch Logs
3. CLoudtrail

Question 5

Notable Protocols in VPC Flowlogs

Answer 5

Popular Protocol Number to take note of:

IMP=1,
TCP=6,
UDP=17