ra* option opinion

[Carter Bullard]

Hey William,
   Actually ra only needs a "-" to indicate the
end of the -r option, which is almost always the
beginning of the filter.  Maybe the documentation 
needs more clarification here.  This incantation 
works fine.

   ra -r file -n tcp and not host 1.2.3.4

and so does this.

   ra tcp

where ra gets its data could be specified in the
.rarc or data could be piped in like this:

   argus -r pktfile -w - | ra tcp

We decided to allow multiple filenames with only one
"-r" indicator, so you could do something like this:

   ra -r */*.gz

So to indicate the end of the -r option we need
a - somewhere, either by itself or as an indication
of another option.

I don't know of a solution other than a "-".  We
could put the filter expression in quotes, preceeded
with an option of its own, like we do with argus
and the '-w filename "filter"' option, but that bites.

Does anyone have a better idea?

Carter

Carter Bullard
QoSient, LLC
300 E. 56th Street, Suite 18K
New York, New York  10022

carter at qosient.com
Phone +1 212 813-9426
Fax   +1 212 813-9426

> -----Original Message-----
> From: owner-argus at lists.andrew.cmu.edu
> [mailto:owner-argus at lists.andrew.cmu.edu]On Behalf Of William Setzer
> Sent: Sunday, January 28, 2001 12:46 PM
> To: argus at lists.andrew.cmu.edu
> Subject: ra* option opinion
> 
> 
> As we are talking about options, I'd like to make a suggestion.  Right
> now the ra* commands require a '-' before the filter expression.  This
> makes them different than all the other tcpdump-alike filters, and is
> something I constantly forget.  I would like to request, if possible,
> that the '-' be made optional.
> 
> 
> William
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3699 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20010128/7cc96a3f/attachment.bin>