Search filter, UDP, INT/CON
Carter Bullard
carter at qosient.com
Thu Apr 28 19:13:17 EDT 2011
Hmmmmmm,
The filter term should be 'start' or 'init'. The start term (for matching start records) is not working, and 'init' seems to be missing. I'll fix tonight.
Carter
On Apr 28, 2011, at 7:43 AM, Jesper Skou Jensen <jesper.skou.jensen at uni-c.dk> wrote:
> Hi there,
>
> I'm trying to do a search for UDP packages that are INT, alternative not INT, but I can't quite figure out how to do this.
>
> That is, without using eg. grep, because when using grep you of course lose further ra manipulation/searching.
>
> With grep I would do this
>
> ra -r log.argus - udp |grep INT
>
> Is it possible to do this with ra directly?
>
>
> --
>
> Jesper S. Jensen
> UNI-C - Århus, Danmark
>
More information about the argus
mailing list