How do I handle sFlow in UltraView?

UltraView doesn’t support sFlow. However, it is possible to use a utility provided by the designers of sFlow to convert the exports to NetFlow, which UltraView does understand.

Note that due to the need to create NetFlow packets with a falsified source address, this is only possible if UltraView is running on a Windows Server operating system such as 2003 or 2008. Client operating systems like XP, Vista or 7 do not allow these packets to be created.

First of all, download the following two files to a folder on the UltraView server (we’ve used c:\sflowtool in the instructions):

sflowtool.exe
srvany.exe

Next, open a command prompt and run the following command to create a service:

sc create sflowtool binPath= c:\sflowtool\srvany.exe start= auto

Now you need to add a value to the registry, so run the following command:

reg add HKLM\SYSTEM\CurrentControlSet\Services\sflowtool\Parameters ^
/v Application /t REG_SZ ^
/d "c:\sflowtool\sflowtool.exe -c 127.0.0.1 -d 2055 -s -S"

Finally, start the service:

net start sflowtool

You should now be able to send sFlow exports to the UltraView server and have UltraView automatically start collecting traffic data.