sflow/tcpdump repository overview

⁠What is tcpdump?

tcpdump⁠ is a command line utility for filtering and printing the contents of network packets. This image receives sFlow and feeds the sampled packet headers through tcpdump.

⁠How to use this image

docker run -p 6343:6343/udp sflow/tcpdump

Configure sFlow agents⁠ to send data to UDP port 6343 on the container. Sampled packet headers will be printed to standard output.

docker run -p 6343:6343/udp sflow/tcpdump -h

Get help on command line arguments.

docker run -p 6343:6343/udp sflow/tcpdump host 10.0.0.160

Display packets for a selected host.

docker run -p 6343:6343/udp sflow/tcpdump tcp port 80

Display web traffic (TCP port 80).

⁠License

Please read and accept the sFlow License⁠ before downloading this software.