ra/ragator output issue with argus-clients-2.0.6.beta.37
Carter Bullard
carter at qosient.com
Tue Dec 17 13:49:22 EST 2002
You should use the RA_FIELD_DELIMITER in your .rarc
file. In my perl scripts, I write out a .rarc formatted
file to a temporary filename that sets RA_FIELD_DELIMITER=','
(see the support/Config/rarc as a guide).
I then call whatever ra* program I need from the perl
script using the "-F tmpfilename" option.
This generates comma separated fields, and you can
use split all day long.
Carter
> -----Original Message-----
> From: owner-argus-info at lists.andrew.cmu.edu
> [mailto:owner-argus-info at lists.andrew.cmu.edu] On Behalf Of
> Mike Iglesias
> Sent: Tuesday, December 17, 2002 1:31 PM
> To: argus-info at lists.andrew.cmu.edu
> Subject: ra/ragator output issue with argus-clients-2.0.6.beta.37
>
>
> The default ra/ragator output has a field called "Flgs" after
> the date/time. This field can be blank, which makes it hard to use
> perl's "split" function on it without checking to see if the
> flags field is blank and adjusting things accordingly. If nothing
> is going to be printed in that field, can something like "-" be
> generated so split will work?
>
> Here's an example of ra output:
>
> 16 Dec 02 23:55:46 udp aaa.bbb.ccc.ddd.138 ->
> eee.fff.ggg.hhh.138 4 0 996 0 INT
>
> What I would like to see:
>
> 16 Dec 02 23:55:46 - udp aaa.bbb.ccc.ddd.138 ->
> eee.fff.ggg.hhh.138 4 0 996 0 INT
>
>
> Mike Iglesias Internet:
> iglesias at draco.acs.uci.edu
> University of California, Irvine phone: 949-824-6926
> Network & Academic Computing Services FAX: 949-824-2069
>
More information about the argus
mailing list