Time filters

Rafael Barbosa rrbarbosa at gmail.com
Mon Jul 12 11:08:53 EDT 2010


>
> Ok. Let me try answer all questions:


When I convert your range for Jan 22, 2009, using

"date -r 1232492400" and "date -r 1232578800", I get the range:


>    Tue Jan 20 18:00:00 EST 2009 - Wed Jan 21 18:00:00 EST 2009


> Do you get similar results on your system?


I get a different range, by the way, I am using a MacOS X 10.6.4:
$ date -r 1232492400
Wed Jan 21 00:00:00 CET 2009
$ date -r 1232578800
Thu Jan 22 00:00:00 CET 2009

Does this mean ra is checking the day 21 instead of 22 in my system?

Where are you located and what timezone is your system using?


Enschede, NL - Central European Timezone (CET)

Are you using the RA_TZ variable in your raTime.conf file? What string are
> you using there?

No.
$ cat raTime.conf
RA_TIME_FORMAT="%F_%H:%M"

What range does your client show when you use the times that do work?
>    ra -D5 -t  2009/01/22.00-2009/01/22.23
>
ra[9394.20cc2670ff7f0000]: 16:47:54.678576 ArgusCheckTimeFormat (0x7026e960,
2009/01/22.00-2009/01/22.23) retn 0: 1232492400-1232661600

And how does your system interpret those time ranges?

Wed Jan 21 00:00:00 CET 2009 - Thu Jan 22 23:00:00 CET 2009

My understanding is that the filter "2009/01/22" is checking day 21 in my
system while  "2009/01/22.00-2009/01/22.23" include all flows from day 21
until 23h at day 22. Is that correct?

Best regards,
Rafael

ps.: In my timezone is 5pm now, so I probably can only reply to a follow up
message tomorrow...
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20100712/035e5463/attachment.html>


More information about the argus mailing list