ragraph: only shows half charts

[Carter Bullard]

Hey Wolfgang,
I updated the command line for consistency with all the other tools.
Before argus-3.0, we had a lot of field keywords that expanded to
two columns, but with the new strategy, these keywords don't expand,
they generate a single metric.  "pkts", "bytes", "rate", "load", "loss",
"mac", to name a few, now generates a single aggregate metric/identifier.

For all the ra* tools, "pkts" now  returns the "Total Pkts" which
is simply (spkts + dpkts).  In prior versions of ragraph(), the perl script
actually intercepted the "pkts" and expanded it to "spkts dpkts", and
bytes to be "sbytes dbytes".

So, ....., in your script, change "pkts" to "spkts dpkts" and all should be
well.

Carter


Wolfgang Barth wrote:
> Hi Carter,
>
> do you changed the user interface for ragraph? With rc.58 I get only the
> upper positive part of graphs (src), I'm missing the negative part (dst).
>
> My call:
>
> /usr/local/bin/ragraph pkts proto -M 1m -title 'eligate2: protocol distribution' \
>    -height 200 -t 2007/10/04 -r /var/log/argus/argus.log \
>    -w /var/www/argus/eligate2/proto/current.png - srcid eligate2
>
> Wolfgang
>