Argus 2.0 wishes

Carter Bullard cbullard at nortelnetworks.com
Fri Mar 10 11:12:47 EST 2000


Hey Neil,
   Hmmmm, well now that I think about it, that isn't quite
right.  The way we get Argus format to stdout is to use the '-w -' option.
Without it, argus will print ASCII to stdout.  How about the '-E filename'
option for " Exception output to filename".  This is independant of how ra()
outputs data to stdout.  Then if you want Argus native output for
the match on stdout or a file, you use the -w option.
 
Carter
 
 
 -----Original Message-----
From: Neil Long [mailto:neil.long at computing-services.oxford.ac.uk]
Sent: Friday, March 10, 2000 10:51 AM
To: Bullard, Carter [NYPAR:DS33:EXCH]
Subject: Re: Argus 2.0 wishes



Hi
 
Yes that would be fine - so long as the stdout piped data is in an argus
data file format. Peter's suggestion is ok for some cases but I like reduce
and then re-combine files for rasort, etc and working with perl and text
files is not really efficient given the tools for argus.
 
Neil

 

 

Hey Neil, 
   Hmmm, if you can have the output of the filter 
go to a file and the non-matched records go to stdout, 
that could solve your problem.  That would be consistent 
with other Unix programs that have had to address this 
type of issue. 

   Would this work? 

Carter 
   

> -----Original Message----- 
> From: Neil Long [ mailto:neil.long at computing-services.oxford.ac.uk
<mailto:neil.long at computing-services.oxford.ac.uk> ] 
> Sent: Thursday, March 09, 2000 10:08 AM 
> To: Bullard, Carter [NYPAR:DS33:EXCH] 
> Cc: argus 
> Subject: Re: Argus 2.0 wishes 
> 
> 
> hello 
> 
> We had a host targetted last night for a flood - one 
> suggestion for the wish 
> list arose 
> 
> Using ra to reduce the data I can process (-w) 
> 
> a) for a given host or net or expression 
> or 
> b) not for the given host or net or expression 
> 
> So to split the large data set up in to 2 new files (normal 
> and flood) needs 
> 2 passes. 
> 
> It would be very useful to feed the result of the filter in 
> to one file and 
> the rest to a second file thus making it a one pass operation. 
> 
> Now you can tell me it is already there ....... 
> 
> I can see that choosing a letter for the operation is getting 
> difficult (how 
> about -W?) 
> 
> Cheers 
> Neil 
> 
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20000310/312e9387/attachment.html>


More information about the argus mailing list