Rasplit issue

Robin Gruyters r.gruyters at yirdis.nl
Wed Jul 19 07:59:30 EDT 2006


Hi Carter,

I have tested overhere and same problem:

[...]
$ rasplit -r argus.out -M size 100m -w /tmp/argus
$ ls -l /tmp
total 0
$

Regards,

Robin Gruyters
Network and Security Engineer
Yirdis B.V.
I: http://yirdis.com
P: +31 (0)36 5300394
F: +31 (0)36 5489119

Quoting carter at qosient.com:

> The idea is "don't use time directives unless you're splitting on time".
>
> What happens when you type:
>      rasplit -r argus.data -M size 100m -w argus
>
> Carter
>
> Carter Bullard
> QoSient LLC
> 150 E. 57th Street Suite 12D
> New York, New York 10022
> +1 212 588-9133 Phone
> +1 212 588-9134 Fax
>
> -----Original Message-----
> From: "CS Lee" <geek00l at gmail.com>
> Date: Wed, 19 Jul 2006 18:28:37
> Cc:argus-info at lists.andrew.cmu.edu
> Subject: [ARGUS] Rasplit issue
>
> Carter,
>
> Here's the output I run
>
> rasplit -r argus.data -M time 60m -w "%Y/%m/%d/argus.%H.%M.%S"
>
> [root /nsm/flow-datas/argus/2006/07/19]# ls -la
>
> total 657060
>
> drwxr-xr-x 2 root sguil 512 Jul 19 11:25 .
> drwxr-xr-x 4 root sguil 512 Jul 19 11:20 ..
> -rw-r--r-- 1 root sguil 74128556 Jul 19 11:20 argus.00.00.00
> -rw-r--r-- 1 root sguil 56191368 Jul 19 11:21 argus.01.00.00
> -rw-r--r-- 1 root sguil 50728848 Jul 19 11:21 argus.02.00.00
> -rw-r--r-- 1 root sguil 43791684 Jul 19 11:22 argus.03.00.00
> -rw-r--r-- 1 root sguil 40557412 Jul 19 11:22 argus.04.00.00
> -rw-r--r-- 1 root sguil 38671264 Jul 19 11:22 argus.05.00.00
> -rw-r--r-- 1 root sguil 53108560 Jul 19 11:23 argus.06.00.00
> -rw-r--r-- 1 root sguil 46801256 Jul 19 11:24 argus.07.00.00
> -rw-r--r-- 1 root sguil 80788156 Jul 19 11:24 argus.08.00.00
> -rw-r--r-- 1 root sguil 129504508 Jul 19 11:25 argus.09.00.00
> -rw-r--r-- 1 root sguil 57852352 Jul 19 11:26 argus.10.00.00
>
> But when I run with size mode,
>
> rasplit -r argus.data -M size 100m -w "%Y/%m/%d/argus."
>
> It does run for a while and stop when finish process, however   
> there's no output at all.
>
>
> --
> Best Regards,
>
> CS Lee<geek00L[at]gmail.com>
>
>







More information about the argus mailing list