Which part of the Layer 3 header is used to identify a flow in NetFlow but it is not used for NBAR?

Which part of the Layer 3 header is used to identify a flow in NetFlow but it is not used for NBAR?

A.
source port

B.
ToS

C.
protocol type

D.
source IP