Writing flow logs in an ra client

[Carter Bullard]

Hey Chris,
   Yes you have to have the ArgusInitCon record in
the front of the file, in order for it to be a legit
argus data file.  The ArgusInitCon record does not change
as long as you are connected to a data source.

   If you use the client library routine 
ArgusWriteNewLogFile(filename, argus), you won't have
to worry about dealing with getting the initial record
in the file, this routine handles it for you.
The argus record you send using this routine should
be in network order so something like this works really
well:

   ArgusHtoN(argus);
   ArgusWriteNewLogFile(outfilestr, argus);
   ArgusNtoH(argus);

Because ArgusWriteNewLogFile() uses ArgusInput->ArgusInitCon,
you don't have to worry about it.

Carter

Carter Bullard
QoSient, LLC
300 E. 56th Street, Suite 18K
New York, New York  10022

carter at qosient.com
Phone +1 212 588-9133
Fax   +1 212 588-9134
http://qosient.com

> -----Original Message-----
> From: owner-argus-info at lists.andrew.cmu.edu 
> [mailto:owner-argus-info at lists.andrew.cmu.edu] On Behalf Of 
> Chris Carton
> Sent: Friday, October 19, 2001 2:45 PM
> To: argus
> Subject: Writing flow logs in an ra client
> 
> 
> I'm writing an ra client and I have a question about writing 
> the flow log 
> files.
> 
> I understand that I have to write the contents of 
> ArgusInput->ArgusInitCon as 
> a header for the log file or ra can't read it.
> 
> If I'm always reading flows by connecting to a live argus 
> server, how often 
> will that data (ArgusInput->ArgusInitCon) change? If it does 
> change I assume 
> that I look for a mar record of some sort that tells me?
> 
> Thanks!
> 
> Chris
> 
>