What is tcpdump?

tcpdump⁠ is a command line utility for filtering and printing the contents of network packets. This image receives sFlow and feeds the sampled packet headers through tcpdump.

How to use this image

docker run -p 6343:6343/udp sflow/tcpdump

Configure sFlow agents⁠ to send data to UDP port 6343 on the container. Sampled packet headers will be printed to standard output.

docker run -p 6343:6343/udp sflow/tcpdump -h

Get help on command line arguments.

docker run -p 6343:6343/udp sflow/tcpdump host 10.0.0.160

Display packets for a selected host.

docker run -p 6343:6343/udp sflow/tcpdump tcp port 80

Display web traffic (TCP port 80).

License

Please read and accept the sFlow License⁠ before downloading this software.