How does the sflow tool parse the sflow message?

Open tongchenqiang opened this issue 2 years ago • 2 comments

I want to modify the sflowtool to parse a specific form of sflow message.Do you know where the code for parsing sflow messages is in sflowtool?Thank you!

Jul 13 '23 23:07 tongchenqiang

I can collect sflow packets on port 6343 of the collector, but the packet content is different from common ones. There are 44 bytes of other content between the Ethernet and IP headers, so I cannot see the source and destination IPs when using sflowtoll to parse this packet. Do you know how to solve this problem? Or can I modify which part of the source code? Thank you！

Jul 14 '23 13:07 tongchenqiang

If you would like help with this, please share a pcap file and/or the output from tshark showing the packet header and how it can be decoded.

Aug 08 '23 21:08 sflow