adding arbitrary lables

George Jones fooologist at gmail.com
Thu Aug 12 06:54:53 EDT 2010


I've looked at autoid and multiple tables.  It may solve the problem.  Just
trying to avoid complexity.
This may be more of a database issue than an argus issue.  I'll go think
about it some more.

Thanks,
---George

On Thu, Aug 12, 2010 at 4:48 AM, <carter at qosient.com> wrote:

> Attribute specification is not trivial, type, size, key, null
> possibilities, so I'm not in favor, but if its important......
> The key concept should be relational database, so you can have other
> tables, just need a common key. We put in autoid, to generate an independent
> I'd that could be used as a relational key. Getting the autoid value s not
> hard.
>
> How about that.
>
> Carter
>
> Sent from my Verizon Wireless BlackBerry
> ------------------------------
> *From: * George Jones <fooologist at gmail.com>
> *Sender: * argus-info-bounces+carter=qosient.com at lists.andrew.cmu.edu
> *Date: *Wed, 11 Aug 2010 14:35:01 -0400
> *To: *<argus-info at lists.andrew.cmu.edu>
> *Subject: *Re: [ARGUS] adding arbitrary lables
>
> What would it take to be able to add a semi-arbitrary list of fields to
> tables when created,
> e.g. something like
>
>   rasqlinsert -s +label,autoid,dur,CUSTOM1,CUSTOM2,...,CUSTOMN
>
> ?
>
> Curious,
> ---George Jones
>
> On Mon, Jul 26, 2010 at 10:37 AM, George Jones <fooologist at gmail.com>wrote:
>
>> So, what would the ralabel.conf look like if I wanted *all* records on
>> input to be labeled "foo" ?
>>
>> Thanks,
>> ---George Jones
>>
>> ---------------------------------------cut
>> here---------------------------------------
>>  From: Carter Bullard <carter <at> qosient.com>
>> Subject: Re: adding arbitrary lables<http://news.gmane.org/find-root.php?message_id=%3c077EFEC2%2d8BF8%2d4A90%2dBA0C%2d9F7C1EA6A48E%40qosient.com%3e>
>> Newsgroups: gmane.network.argus<http://news.gmane.org/gmane.network.argus>
>> Date: 2010-06-28 14:10:38 GMT (3 weeks, 6 days, 22 hours and 51 minutes
>> ago)
>>
>> Hey George,
>> Well, you could do this (leaving out a lot of specifics)
>>
>>    ... | ralabel -f ralabel.conf -w - | rasqlinsert -M label="foo" -s +label
>>
>> where ralabel.conf specifies how flows are labeled and "foo" is a regular
>> expression that will match from the label buffer.   This will insert flows
>> that match a particular label into a specified database table.
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20100812/6ec99ebf/attachment.html>


More information about the argus mailing list