Thanks very much for the response.
I would like to understand about the collector.
My understanding is that, the collector can be a server running with a wireshark
The SFLOW agents will collect the samples and send it to the server (Collector)
The server (Collector) receives the samples and the outputs can be seen in the wireshark app.
So, in the Sflow samples is it possible to see all layers of traffic ? for example, the samples will be shown with sourceip, destip, source port, dest port, sorcemac, dest mac etc. ? Or only the Raw ethernet frame ?
From this link its mentioned, only raw ethernet hearders can be sampled. Which means source MAC, and Dest Mac from the ethernet frame. So, Sflow outputs will fetch only L2 information ? Is my interpretation is correct ?
Thank you all.