adding arbitrary lables

[carter at qosient.com]

Attribute specification is not trivial, type, size, key, null possibilities, so I'm not in favor, but if its important......
The key concept should be relational database, so you can have other tables, just need a common key.  We put in autoid, to generate an independent I'd that could be used as a relational key.  Getting the autoid value s not hard.

How about that.

Carter 

Sent from my Verizon Wireless BlackBerry

-----Original Message-----
From: George Jones <fooologist at gmail.com>
Sender: argus-info-bounces+carter=qosient.com at lists.andrew.cmu.edu
Date: Wed, 11 Aug 2010 14:35:01 
To: <argus-info at lists.andrew.cmu.edu>
Subject: Re: [ARGUS] adding arbitrary lables

What would it take to be able to add a semi-arbitrary list of fields to
tables when created,
e.g. something like

  rasqlinsert -s +label,autoid,dur,CUSTOM1,CUSTOM2,...,CUSTOMN

?

Curious,
---George Jones

On Mon, Jul 26, 2010 at 10:37 AM, George Jones <fooologist at gmail.com> wrote:

> So, what would the ralabel.conf look like if I wanted *all* records on
> input to be labeled "foo" ?
>
> Thanks,
> ---George Jones
>
> ---------------------------------------cut
> here---------------------------------------
>  From: Carter Bullard <carter <at> qosient.com>
> Subject: Re: adding arbitrary lables<http://news.gmane.org/find-root.php?message_id=%3c077EFEC2%2d8BF8%2d4A90%2dBA0C%2d9F7C1EA6A48E%40qosient.com%3e>
> Newsgroups: gmane.network.argus<http://news.gmane.org/gmane.network.argus>
> Date: 2010-06-28 14:10:38 GMT (3 weeks, 6 days, 22 hours and 51 minutes
> ago)
>
> Hey George,
> Well, you could do this (leaving out a lot of specifics)
>
>    ... | ralabel -f ralabel.conf -w - | rasqlinsert -M label="foo" -s +label
>
> where ralabel.conf specifies how flows are labeled and "foo" is a regular
> expression that will match from the label buffer.   This will insert flows
> that match a particular label into a specified database table.
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20100811/4e7c5009/attachment.html>