sflowtool

Add ability to spoof IPv6 source address to match sFlow agent address when converting to NetFlow, as for IPv4.

The sFlow input can carry samples with both IPv4 and IPv6 agent addresses. So when converting to NetFlow and spoofing the source address to match the original agent address, separate v4 and v6 collector addresses are required. For example:

sflowtool -p 6343 -d 2055 -N9 -S -c 10.0.0.99 -c FEC0::99

But sending spoofed traffic over the network can trigger (should trigger!) reverse-path-filtering problems. So if you have a legacy collector that only accepts NetFlow then it may work better to carry the data as sFlow all the way there and run the conversion locally on that collector server. In that scenario it will look like this:

sflowtool -p 6343 -d 2055 -N9 -S -c 127.0.0.1 -c ::1

sflowtool

Add PFC (Priority Flow Control) counter structure.

sflowtool

Add extended_timestamp: a timestamp in nanoseconds (wall clock unixtime, UTC) that can be included with any packet-sample or discard notification.

sflowtool

Add ability to record sFlow datagrams in tcpdump format.
Add more accurate timestamping.

sflowtool

Compiles natively on MacOS.
Adds option for variable-speed playback of a binary sFlow capture file.

sflowtool

Allow bind to listen address.
Apply custom line output to rtmetric, rtflow.
Update configure.ac.

sflowtool

Allow any flow-samples annotations to appear in discard-samples too.

sflowtool

Include ethernet_type field when decoded from packet header.
Do not exit on unknown headerProtocol value.

sflowtool

Remove Windows(TM) build capability.
Add option for efficient pcap to sFlow encoding with play-back speed option.
Add long-form options.
Avoid sprintf.
Add new packet-drop reason structures.

sflowtool

Add IPv6 template to NetFlow export