Search filter, UDP, INT/CON

Carter Bullard carter at qosient.com
Thu Apr 28 19:13:17 EDT 2011


Hmmmmmm,
The filter term should be 'start' or 'init'. The start term (for matching start records) is not working, and 'init' seems to be missing.  I'll fix tonight.

Carter



On Apr 28, 2011, at 7:43 AM, Jesper Skou Jensen <jesper.skou.jensen at uni-c.dk> wrote:

> Hi there,
> 
> I'm trying to do a search for UDP packages that are INT, alternative not INT, but I can't quite figure out how to do this.
> 
> That is, without using eg. grep, because when using grep you of course lose further ra manipulation/searching.
> 
> With grep I would do this
> 
> ra -r log.argus - udp |grep INT
> 
> Is it possible to do this with ra directly?
> 
> 
> -- 
> 
>  Jesper S. Jensen
> UNI-C - Århus, Danmark
> 



More information about the argus mailing list