Another 2.0 request
Carter Bullard
carter at qosient.com
Fri Aug 4 18:32:13 EDT 2000
Wow, a lot of work today ;o)
I will look into all of this over the weekend and see what
the best approach will be.
One thing, David. You don't have to kill argus to get the
output file. All you have to do is rename the file and
argus recreates the original file and keeps going.
Carter
-----Original Message-----
From: owner-argus at lists.andrew.cmu.edu
[mailto:owner-argus at lists.andrew.cmu.edu]On Behalf Of Peter Van Epp
Sent: Friday, August 04, 2000 5:05 PM
To: argus
Subject: Another 2.0 request
David reminded me, I'd like to see an ra input file file:
file:
dmz.argus.2000_08_02_06_30.gz
dmz.argus.2000_08_03_00_00.gz
dmz.argus.2000_08_03_06_30.gz
dmz.argus.2000_08_04_00_00.gz
dmz.argus.2000_08_04_06_30.gz
ra -f file -c -n
reads the input files one at a time out of file (instead of from the command
line). I rolled a fast perl script that does this but internal would be
better yet (more efficient):
#!/usr/bin/perl
if ($ARGV[0]) {
open (FILES,"$ARGV[0]") || die "Couldn't open $ARGV[0]$!";
} else {
print STDERR "usage: $0 argus_files 'argus filter expression'\n";
exit (1);
}
while (<FILES>) {
$start_time = "";
$end_time = "";
chop;
$filename = $_;
open(ARGUS,"ra -r $filename -c -n $ARGV[1] |")
|| die "Couldn't open $file_name $!";
while (<ARGUS>) {
print "$_";
}
}
More information about the argus
mailing list