rasplit -M flow problem

[CS Lee]

hi carter,

In rasplit man page, there is

       -M splitmode
           Supported spliting modes are:
                  count <num>
                   size <size>
                   time <period>
                   flow "filter-expression"

When I invoke rasplit with -M flow 'tcp', it says rasplit[86169]:
16:30:30.153365 flow filter parse error

I have tried with other filter expression but it doesn't seem to work.

Cheers ;]

-- 
Best Regards,

CS Lee<geek00L[at]gmail.com>

http://geek00l.blogspot.com
http://defcraft.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20090421/473beeea/attachment.html>