rasort -N

[CS Lee]

Hey Carter,

Don't be sorry, you have done a very good work on argus. I can see the
flexibility that been introduced if you extend it, I would like to know how
others think about it as well. Maybe if others also would like to have this
features in as it is kinda useful for some reasons and it would be good to
get it in.

Thanks a lot.

On 11/3/06, Carter Bullard <carter at qosient.com> wrote:
>
> Hey CS Lee,My apologies, yes, I found a stupid bug in rasort, trying to be
> clever and
> reusing the Nflag.  I have added the -N option to the ra.1 man page.Hopefully
> I will get a new round of code up today.
>
> So, this brings up a good question again.  The -N flag is very useful, but
> somewhat primitive (sometimes that is a good thing).  Should we consider
> extensions, like having an input -N and an output -N ?   Should the -N
> option accept a range, to facilitate web based paging viewers?
>
> I think so, but , ....  The biggest hurdle is having a useful syntax for
> the
> command line option.  So is this useful?
>
>    ra -N 10         (first input 10, implied range starting at 1)
>    ra -N 10-20   (range, input records 10-20)
>    ra -N o10       (output the first 10 records)
>    ra -N -10        (output the last 10 records ?)
>
> What do you think?  I am not sold on this idea, except that we probably do
> need to support a range expression.
>
> Sorry for any inconvenience,
>
> Carter
>
>
> On Nov 1, 2006, at 7:41 AM, CS Lee wrote:
>
> Carter,
>
> Apparently -N option is not shown in ra(1) man page either, while it can
> be used and of course I prefer if -N is available instead of using head().
> However I have read that all the argus clients support ra options, but it is
> not working for rasort(racluster works pretty well with -N), I try to use -N
> with rasort and it doesn't work so I think piping to ra is what I can do for
> the moment. Thanks for the clue :)
>
> On 11/1/06, carter at qosient.com < carter at qosient.com> wrote:
> >
> > Hmmmm, all ra* programs support the '-N x' option, and it controls how
> > many input records will be processed.  You need to read the ra.1 man
> > page to see all the ra* options.
> >
> > Hmmmmmm,  the right thing to do is:
> >     rasort -r file -m pkts -w - | ra -N x -w top.x.out
> >
> > to get the top x pkt generators.  I would use ra() rather that head(),
> > to create the binary output of your top x list just in case you also wanted
> > to know store it and process it later, like generating an hourly topx, and
> > then from all the hourly, generate a daily, monthly, etc.
> >
> > Sorry if I generated any confusion.
> >
> > Carter
> >
> > Carter Bullard
> > QoSient LLC
> > 150 E. 57th Street Suite 12D
> > New York, New York 10022
> > +1 212 588-9133 Phone
> > +1 212 588-9134 Fax
> >
> > -----Original Message-----
> > From: "CS Lee" <geek00l at gmail.com>
> > Date: Wed, 1 Nov 2006 16:21:53
> > To:argus-info at lists.andrew.cmu.edu
> > Subject: [ARGUS] rasort -N
> >
> > Carter,
> >
> > The -N option seems not working for me for rasort and it is not in
> > rasort -h or man page either, I'm on rc33. I use head -10 for top 10 since
> > when running rasort with -N 10 shows nothing.
> >
> > Thanks.
> >
> > --
> > Best Regards,
> >
> > CS Lee<geekooL[at]gmail.com>
>
>
>
>
> --
> Best Regards,
>
> CS Lee<geekooL[at]gmail.com>
>
>
>
>
>
>


-- 
Best Regards,

CS Lee<geekooL[at]gmail.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20061103/7dcad2d5/attachment.html>