A monitoring team needs to see which endpoints exchange the most traffic without collecting complete packet payloads. Which data source best fits?

1. Flow records such as IPFIX
2. A full application debug dump containing every payload
3. A single interface's cumulative byte counter only
4. A DNS zone file exported once per week