UltraView doesn’t support sFlow. However, it is possible to use a utility provided by the designers of sFlow to convert the exports to NetFlow, which UltraView does understand.
Note that due to the need to create NetFlow packets with a falsified source address, this is only possible if UltraView is running on a Windows Server operating system such as 2003 or 2008. Client operating systems like XP, Vista or 7 do not allow these packets to be created.
First of all, download the following two files to a folder on the UltraView server (we’ve used
c:\sflowtool in the instructions):
Next, open a command prompt and run the following command to create a service:
sc create sflowtool binPath= c:\sflowtool\srvany.exe start= auto
Now you need to add a value to the registry, so run the following command:
reg add HKLM\SYSTEM\CurrentControlSet\Services\sflowtool\Parameters ^ /v Application /t REG_SZ ^ /d "c:\sflowtool\sflowtool.exe -c 127.0.0.1 -d 2055 -s -S"
Finally, start the service:
net start sflowtool
You should now be able to send sFlow exports to the UltraView server and have UltraView automatically start collecting traffic data.
sflowtool.exeis a version of InMon’s utility compiled for Windows with spoofing support by DANG Networks.
srvany.exeis a utility from Microsoft that is part of the Windows 2003 Resource Kit Tools.