What it does
sflowtool receives binary sFlow and produces readable or structured output, with options to forward the feed or convert packet captures to sFlow samples.
Point sflowtool at the port receiving an exporter feed, or read a saved capture, then choose readable lines, selected fields or JSON for analysis. The examples also pipe decoded packet data into tcpdump and replicate a feed to additional collectors. NetFlow conversion is a separate output choice, with v9 needed for the documented IPv6 forwarding route. Keep the sampled nature of the input in mind: the example distinguishes packet size, captured header length and counter samples. This command-line decoder does not replace a retained-history dashboard. Choose storage or downstream processing for trends, and record the feed and output settings with the result.
Strengths
- Readable and structured output choices
- Feed forwarding and capture-file options
Watch out for
- Historical storage and dashboards require other tools