argusarchive script

Chas DiFatta chas at difatta.org
Mon May 13 16:37:51 EDT 2002


I've been doing this for months.  Carter, shall I post my changes
to argusarchive?

	...cd

>-----Original Message-----
>From: owner-argus-info at lists.andrew.cmu.edu
>[mailto:owner-argus-info at lists.andrew.cmu.edu]On Behalf Of Carter
>Bullard
>Sent: Friday, May 10, 2002 1:18 PM
>To: 'David J Brumley'; 'Peter Van Epp'
>Cc: argus-info at lists.andrew.cmu.edu
>Subject: RE: argusarchive script
>
>
>Hey Peter,
>I think I hear you saying that the right way to do
>it is to split the file along hard time boundaries.
>That way if the file spans 12 midnight or noon, you
>would like to generate the before and after file.
>
>But short of this, we could read the first record
>to see what the start time is in the file and use
>that as guide for the file timestamp.
>
>Carter
>
>Carter Bullard
>QoSient, LLC
>300 E. 56th Street, Suite 18K
>New York, New York  10022
>
>carter at qosient.com
>Phone +1 212 588-9133
>Fax   +1 212 588-9134
>http://qosient.com
>
>> -----Original Message-----
>> From: owner-argus-info at lists.andrew.cmu.edu 
>> [mailto:owner-argus-info at lists.andrew.cmu.edu] On Behalf Of 
>> David J Brumley
>> Sent: Friday, May 10, 2002 1:04 PM
>> To: Peter Van Epp
>> Cc: argus-info at lists.andrew.cmu.edu
>> Subject: Re: argusarchive script
>> 
>> 
>> 
>> I've included my rotate script, which basically takes current 
>> time - 1/2 hour to come up with last hours date. Seems to 
>> work. It does take into consideration the daylight savings 
>> time when calculating the hour, though how to deal with it is 
>> implementation dependent :)
>> 
>> -david
>> 
>> 
>> > 	Now I've started converting to 2.x (you don't want to 
>> rush these 
>> > things after all :-)), I've hit my first rub. The 
>> argusarchive script 
>> > file naming scheme has a short coming (at least as far as I'm 
>> > concerned) in that the first and last files of the day are in the 
>> > wrong place (i.e in "yesterday" or "tomorrow". At present the file 
>> > argus.2002.04.29.00.00.00.gz (for instance) really belongs in 
>> > archive/2002/04/28/argus.2002.04.28.23.00.00.gz not 
>> > archive/2002/04/29/argus.2002.04.29.00.00.00.gz (where it is) since 
>> > the data in it starts at 04/28 23:00 to 04/28 23:59. While 
>> this could 
>> > be compensated for in the extraction perl script, I think the right 
>> > answer is probably to change the archive script to "do the right 
>> > thing". The question is how best to do that. The first thing that 
>> > occurs to me is generate the file name when the switch happens (as 
>> > now) but save it in a file in the file system for the next 
>> switch and 
>> > use the file name saved at the last switch (or startup which is a 
>> > wrinkle that needs thinking about) as the archive file 
>> name. Essentially I want the file name to be the date at the 
>> start of the capture period not the end (because then data 
>> for a day is in a single directory as it should be).
>> > 	Anyone have any clever suggestions about how to easily 
>> achieve this
>> > without storing file names (with the attendent messyness of 
>> needing to consider
>> > setting an appropriate filename on startup) or should we 
>> just store the 
>> > filename and be done with it?
>> > 
>> > Peter Van Epp / Operations and Technical Support
>> > Simon Fraser University, Burnaby, B.C. Canada
>> 
>> -- 
>> David Brumley
>> 650.723.2445
>> 
>
>
>



More information about the argus mailing list