Racluster man page

[Carter Bullard]

This option is specific to aggregators, like racluster() and its  
describe
in racluster's usage

    racluster -h

I've updated the manpage.  Thanks!!!!!

"-M replace" will replace the source file with the clustered data.
clustering will merge records that match based on the records flow key.
As a result, you get less records, and so smaller files.

Use the "-M replace" option when you do not need the original source
data files, as they will be lost!!!

Carter


On Apr 18, 2007, at 3:37 AM, CS Lee wrote:

> Carter,
>
> Now I have more and more clear picture of argus. But for racluster,  
> you have shown me the usage of -M replace where I can't find it in  
> man  page of racluster, what does it actually do(from your previous  
> post you said it is to consolidate all the aggregated flow). I have  
> seen the size of the file is stripped and becomes smaller but I  
> don't know exactly what it has been done.
>
> Sorry for nobby question again.
>
> Thanks.
>
> -- 
> Best Regards,
>
> CS Lee<geekooL[at]gmail.com>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20070418/4fd4afe7/attachment.html>