hsflowd

mod_k8s and mod_containerd: the containerd.go program is now more likely to capture the TaskExit event and poll the counters one more time before the pod is done -- passing termination state so it can be included with the sFlow feed. The collector can then know if the pod terminated gracefully or crashed.

hsflowd

mod_pcap/epcap: allow virtual device in config, when supplied individually with dev=.
mod_pcap: add nanosecond timestamp to sFlow export.
Stability: memory buffer recycling improvements, cross-checks and debug options.

hsflowd

include extended_timestamp (nS wallclock UTC) in the export when it is supplied with PSAMPLE and DROPMON

hsflowd

Clean up file-descriptor leak when mod_tcp used in conjunction with mod_k8s.

hsflowd

Avoid SONiC SIGSEGV when last collector was removed while collector socket open retry timer was counting down.

hsflowd

mod_epcap: reduce logging
add docker_build files for redhat10, ubuntu24 and debian13

hsflowd

Added mod_epcap : an eBPF packet-sampling module that requires libbpf-dev and clang to compile, and will only run properly with Linux kernel 6.11+. This module has the advantage that the ingress/egress direction of the packet is captured by the eBPF program, along with routing information where applicable.

hsflowd

Adding mod_vpp, to accept counters, tx/rx packet samples and packet-drops from the VPP sFlow plugin.
Also includes a number of minor bug fixes, logging improvements, and changes to satisfy Coverity Scan static-analysis checks.

hsflowd

mod_sonic: bugfix - retrieve output unicast packet counter via redis "SAI_PORT_STAT_IF_OUT_UCAST_PKTS" field
mod_k8s,mod_docker,mod_containerd: factor code that probes for VNIC details in other namespaces
interpret QSFP28 EEPROM optical counters
update example rtmetric/rtflow scripts to python3

hsflowd

New module mod_vpp. Compile using make FEATURES=VPP. This module receives packet-samples and counter-samples generated by the vpp-sflow plugin https://github.com/sflow/vpp-sflow. The VPP plugin sends random packet-samples on the Linux Netlink PSAMPLE multicast channel, and periodic interface counters on a Netlink USERSOCK multicast channel. If there are interfaces on the server that were not turned over to VPP, then they can still be monitored as before.