What is sflowtool?

sflowtool⁠ receives sFlow data, and generates either a simple-to-parse tagged-ASCII output, or binary output in tcpdump(1) format. It can also generate Cisco NetFlow version 5 datagrams and send them to a destination UDP host:port, or forward the original sFlow feed to a number of additional collectors.

How to use this image

docker run -p 6343:6343/udp sflow/sflowtool

Configure sFlow agents⁠ to send data to UDP port 6343 on the container. Contents of the binary telemetry stream will be printed to standard output.

docker run sflow/sflowtool -h

Get help on command line arguments.

docker run -p 6343:6343/udp sflow/sflowtool -g | grep srcIP

Pipe "grep friendly" output into grep tool and print srcIP fields.

docker run -p 6343:6343/udp sflow/sflowtool -H

Print sFlow HTTP records from load balancers and web servers in common log format.

docker run -p 6343:6343/udp sflow/sflowtool -t | tcpdump -r -

Extract sampled packet headers and export them in pcap format to packet analyzer.

License

Please read and accept the sFlow License⁠ before downloading this software.