adding arbitrary lables

carter at carter at
Wed Aug 11 16:48:37 EDT 2010

Attribute specification is not trivial, type, size, key, null possibilities, so I'm not in favor, but if its important......
The key concept should be relational database, so you can have other tables, just need a common key.  We put in autoid, to generate an independent I'd that could be used as a relational key.  Getting the autoid value s not hard.

How about that.


Sent from my Verizon Wireless BlackBerry

-----Original Message-----
From: George Jones <fooologist at>
Sender: at
Date: Wed, 11 Aug 2010 14:35:01 
To: <argus-info at>
Subject: Re: [ARGUS] adding arbitrary lables

What would it take to be able to add a semi-arbitrary list of fields to
tables when created,
e.g. something like

  rasqlinsert -s +label,autoid,dur,CUSTOM1,CUSTOM2,...,CUSTOMN


---George Jones

On Mon, Jul 26, 2010 at 10:37 AM, George Jones <fooologist at> wrote:

> So, what would the ralabel.conf look like if I wanted *all* records on
> input to be labeled "foo" ?
> Thanks,
> ---George Jones
> ---------------------------------------cut
> here---------------------------------------
>  From: Carter Bullard <carter <at>>
> Subject: Re: adding arbitrary lables<>
> Newsgroups:<>
> Date: 2010-06-28 14:10:38 GMT (3 weeks, 6 days, 22 hours and 51 minutes
> ago)
> Hey George,
> Well, you could do this (leaving out a lot of specifics)
>    ... | ralabel -f ralabel.conf -w - | rasqlinsert -M label="foo" -s +label
> where ralabel.conf specifies how flows are labeled and "foo" is a regular
> expression that will match from the label buffer.   This will insert flows
> that match a particular label into a specified database table.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the argus mailing list