How does the sflow tool parse the sflow message?

Question

How does the sflow tool parse the sflow message?

tongchenqiang opened this issue a year ago · 2 comments

I want to modify the sflowtool to parse a specific form of sflow message.Do you know where the code for parsing sflow messages is in sflowtool?Thank you!

Answer 1 · 2023-07-14T13:39:46.000Z

I can collect sflow packets on port 6343 of the collector, but the packet content is different from common ones. There are 44 bytes of other content between the Ethernet and IP headers, so I cannot see the source and destination IPs when using sflowtoll to parse this packet. Do you know how to solve this problem? Or can I modify which part of the source code? Thank you！

Answer 2 · 2023-08-08T21:23:14.000Z

If you would like help with this, please share a pcap file and/or the output from tshark showing the packet header and how it can be decoded.