ra -t option

[tbh]

I was playing with that a bit. What confused me was that:
ra -r argus-eth1.2008.01.24.12.00.00.gz -t *12:30
Didn't ouput anything.
And
ra -r argus-eth1.2008.01.24.12.00.00.gz -t *.12:30
Gave me a syntax error:
ra[331]: 15:08:19.841767 time syntax error *.12:30

I had to:
ra -r argus-eth1.2008.01.24.12.00.00.gz -t **.12:30
To get it to work.

Looking at the man options, I figured I must need an * for each place
holder in the day field.
<snip>
 -t ****/11/23     all records in Nov 23rd, 2006, any year
<snip>

tbh


On 1/25/08, Carter Bullard <carter at qosient.com> wrote:
> There is a HUGE performance hit when you use time wildcarding,
> so its not on by default.  Use the '*' if you want to get any day at
> 12:30.
>
> Carter
>
>
> On Jan 25, 2008, at 3:09 PM, tbh wrote:
>
> > Well, if I paid more attention to the man page....
> > <snip>
> > -t 14             specify the time range 2pm-3pm for TODAY
> > <snip>
> >
> > My bad...:-(
> > tbh
> >
> > On 1/25/08, tbh <tbh1000 at gmail.com> wrote:
> >> Got a question on the -t option on the ra client. If I run:
> >>
> >> ra -r argus-eth1.2008.01.24.12.00.00.gz -t 2008/01/24.12:30
> >>
> >> I get the output for that time frame.
> >>
> >> However, if I run:
> >>
> >> ra -r argus-eth1.2008.01.24.12.00.00.gz -t 12:30
> >>
> >> I get nothing. The file being read is created via rasplit on the main
> >> argus output file based on one hour increments. Shouldn't I be able
> >> to
> >> filter the records on this file without having to specify the full
> >> date as well? Or am I missing something?
> >>
> >>
> >> The more I play around with argus, the more I like it!!
> >>
> >> Thanks!
> >> tbh
> >>
> >
>