Issues with -t option

Carter Bullard carter at qosient.com
Tue Apr 8 14:59:34 EDT 2008


Hey Nick,
So I figured out the problem.  When we push the time filter into a  
time zone
that is different than the current one (EST -> EDT), I was not  
correcting all
the fields that needed to be corrected.  In the example 2007/11/07, if  
you
are in EDT and convert to this date, the returned value is  
2007/11/06.23:00:00.
I was not adjusting for a possible change of day, in this case, so we  
got a
day behind.

I've also added UTC as input for time.  I'll have it upload later today.

Carter


On Apr 8, 2008, at 1:21 PM, Carter Bullard wrote:

> Hmmmm, yes I get the same error you do for the 2007/11/07.
> I'll investigate and I'll add using UTC to the command line.
>
> Carter
>
>
> On Apr 8, 2008, at 12:33 PM, Nick Diel wrote:
>> Carter,
>>
>> The capital M is what I needed for some of the time filters, at the  
>> end of the day yesterday I was just coping what was in the man page  
>> (lower case m).
>>
>> The filter 2007/11/07 produces a filter that is a day behind:
>> [diel at lander-nic ~]$ ra -D5 -t 2007/11/07
>> ra[3166.c046fcb7]: 10:25:13.134115 ArgusParseTime (0xb7f82008,  
>> 0xb7f82078, 0xb7f820a4,2007,  ) retn 3: 1194332400
>> ra[3166.c046fcb7]: 10:25:13.134229 ArgusCheckTimeFormat (0xc8b2e0,  
>> 2007/11/07) retn 0: 1194332400-1194418800
>> ra[3166.c046fcb7]: 10:25:13.134271 ArgusParseTimeArg (2007/11/07,  
>> 4, 0xc8b2e0)
>> ra[3166.c046fcb7]: 10:25:13.134339 ArgusAddFileList (0xb7f82008, -,  
>> 1, -1, -1) returning -1
>>
>>
>> The filter 2007y11M7d is close, but an hour off (probably due to  
>> daylight savings)
>> [diel at lander-nic ~]$ ra -D5 -t 2007y11M7d
>> ra[3159.c056f4b7]: 10:20:54.380457 ArgusParseTime (0xb7f03008,  
>> 0xb7f03078, 0xb7f030a4,,  ) retn 3: 1207671654
>> ra[3159.c056f4b7]: 10:20:54.380566 ArgusCheckTimeFormat (0xc8b2e0,  
>> 2007y11M7d) retn 0: 1194415200-1194501600
>> ra[3159.c056f4b7]: 10:20:54.380614 ArgusParseTimeArg (2007y11M7d,  
>> 4, 0xc8b2e0)
>> ra[3159.c056f4b7]: 10:20:54.380663 ArgusAddFileList (0xb7f03008, -,  
>> 1, -1, -1) returning -1
>>
>> It used MST(-6 GMT) which is correct for right now, but not for  
>> November should be -7 GMT.
>>
>> More specific filters seems to be working great.  Would love for a  
>> way to input UTC timestamps or even just a raw time range UTC-UTC,  
>> didn't see any indication this was currently possible.
>>
>> Thanks for the input!
>>
>> Nick
>>
>> On Mon, Apr 7, 2008 at 6:40 PM, Carter Bullard <carter at qosient.com>  
>> wrote:
>> Hey Nick,
>> Sounds like a bug.  What happens when you specify a valid range?
>>  "-t 12-13"
>>  "-t 06.12-06.13"
>>
>> if you run it with a "-D 4" option, it should tell you what the unix
>> time range the time filter generates.
>>
>> I think for month you need a 'M'?
>>
>> Carter
>>
>>
>> anubis:common carter$ ra -D5 -t 12-13
>> ra[49162.a0052074]: 2008/04/07.20:37:21.768040 ArgusParseTime  
>> (0x32f000, 0x32f070, 0xa0053cc8,12,  ) retn 4: 1207584000
>> ra[49162.a0052074]: 2008/04/07.20:37:21.768128 ArgusParseTime  
>> (0x32f000, 0x32f09c, 0x32f070,13, -) retn 4: 1207587600
>> ra[49162.a0052074]: 2008/04/07.20:37:21.768176 ArgusCheckTimeFormat  
>> (0xa0053cc8, 12-13) retn 0: 1207584000-1207587600
>> ra[49162.a0052074]: 2008/04/07.20:37:21.768200 ArgusParseTimeArg  
>> (12-13, 4, 0xa0053cc8)
>> ra[49162.a0052074]: 2008/04/07.20:37:21.768291 ArgusAddFileList  
>> (0x32f000, -, 1, -1, -1) returning -1
>>
>> anubis:common carter$ ra -D5 -t 12
>> ra[49163.a0052074]: 2008/04/07.20:37:25.920039 ArgusParseTime  
>> (0x32f000, 0x32f070, 0x32f09c,12,  ) retn 4: 1207584000
>> ra[49163.a0052074]: 2008/04/07.20:37:25.920111 ArgusCheckTimeFormat  
>> (0xa0053cc8, 12) retn 0: 1207584000-1207587600
>> ra[49163.a0052074]: 2008/04/07.20:37:25.920135 ArgusParseTimeArg  
>> (12, 4, 0xa0053cc8)
>> ra[49163.a0052074]: 2008/04/07.20:37:25.920184 ArgusAddFileList  
>> (0x32f000, -, 1, -1, -1) returning -1
>>
>> anubis:common carter$ ra -D5 -t 12m
>> ra[49180.a0052074]: 2008/04/07.20:39:21.244726 ArgusParseTime  
>> (0x32f000, 0x32f070, 0x32f09c,,  ) retn 5: 1207615161
>> ra[49180.a0052074]: 2008/04/07.20:39:21.244880 ArgusCheckTimeFormat  
>> (0xa0053cc8, 12m) retn 0: 1207613520-1207613580
>> ra[49180.a0052074]: 2008/04/07.20:39:21.244923 ArgusParseTimeArg  
>> (12m, 4, 0xa0053cc8)
>> ra[49180.a0052074]: 2008/04/07.20:39:21.245022 ArgusAddFileList  
>> (0x32f000, -, 1, -1, -1) returning -1
>>
>> anubis:common carter$ ra -D5 -t 06.12-06.13
>> ra[49143.a0052074]: 2008/04/07.20:35:56.829484 ArgusParseTime  
>> (0x32f000, 0x32f070, 0xa0053cc8,06,  ) retn 4: 1207497600
>> ra[49143.a0052074]: 2008/04/07.20:35:56.829669 ArgusParseTime  
>> (0x32f000, 0x32f09c, 0x32f070,06, -) retn 4: 1207501200
>> ra[49143.a0052074]: 2008/04/07.20:35:56.829766 ArgusCheckTimeFormat  
>> (0xa0053cc8, 06.12-06.13) retn 0: 1207497600-1207501200
>> ra[49143.a0052074]: 2008/04/07.20:35:56.829808 ArgusParseTimeArg  
>> (06.12-06.13, 4, 0xa0053cc8)
>>
>> anubis:cmmon carter$ ra -D5 -t 2008/02/06.12-06.13
>> ra[49151.a0052074]: 2008/04/07.20:36:40.358480 ArgusParseTime  
>> (0x32f000, 0x32f070, 0xa0053cc8,2008,  ) retn 4: 1202317200
>> ra[49151.a0052074]: 2008/04/07.20:36:40.358661 ArgusParseTime  
>> (0x32f000, 0x32f09c, 0x32f070,06, -) retn 4: 1202320800
>> ra[49151.a0052074]: 2008/04/07.20:36:40.358756 ArgusCheckTimeFormat  
>> (0xa0053cc8, 2008/02/06.12-06.13) retn 0: 1202317200-1202320800
>> ra[49151.a0052074]: 2008/04/07.20:36:40.358798 ArgusParseTimeArg  
>> (2008/02/06.12-06.13, 4, 0xa0053cc8)
>>
>>
>>
>> On Apr 7, 2008, at 7:40 PM, Nick Diel wrote:
>>
>> I am trying to use the -t option and am not having much luck.  I  
>> want to be able to specify a range down to the seconds, but I can't  
>> get a filter working more specific than a month.  Also is it  
>> possible to specify time in UTC format for the -t option?
>>
>>
>> Regular output (I removed IP info), note this file is from last year.
>> [diel at lander-nic ~]$ ra -r argus.out
>>     2007/11/07-09:01:26.022023  e         *****
>>     2007/11/07-09:01:26.024221  e         *****
>>     2007/11/07-09:01:26.028978  e         *****
>>     2007/11/07-09:01:26.034025  e         *****
>>     2007/11/07-09:01:26.044853  e         *****
>>
>>
>> Non working time specifications.
>> [diel at lander-nic ~]$ ra -r argus.out -t 2007y11m7d
>> [diel at lander-nic ~]$ ra -r argus.out -t 2007y11m
>> [diel at lander-nic ~]$ ra -r argus.out -t 2007/11/07
>>
>>
>> Working time specifications
>> [diel at lander-nic ~]$ ra -r argus.out -t 2007/11
>>     2007/11/07-09:01:26.022023  e         *****
>>     2007/11/07-09:01:26.024221  e         *****
>>     2007/11/07-09:01:26.028978  e         *****
>>     2007/11/07-09:01:26.034025  e         *****
>>     2007/11/07-09:01:26.044853  e         *****
>> [diel at lander-nic ~]$ ra -r argus.out -t ****/11
>>     2007/11/07-09:01:26.022023  e         *****
>>     2007/11/07-09:01:26.024221  e         *****
>>     2007/11/07-09:01:26.028978  e         *****
>>     2007/11/07-09:01:26.034025  e         *****
>>     2007/11/07-09:01:26.044853  e         *****
>>
>>
>> Any thoughts?
>> Nick Diel
>>
>>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20080408/bd85f47b/attachment.html>


More information about the argus mailing list