Collecting multiple types of information at once
John Gerth
gerth at graphics.stanford.edu
Tue Aug 28 15:56:21 EDT 2012
>From the radium man page:
"Radium, like all ra based clients, supports a number of ra options including remote data access, reading from
multiple files and filtering of input argus records through a terminating filter expression."
I just tried to use "radium -r ...." on a days worth of hourly files here and while one can
connect multiple clients to it, I can certainly believe that the behavior might not enable what you want.
In any event, I obviously did misunderstand your scenario and for that I apologize.
/John
John Gerth gerth at graphics.stanford.edu Gates 378 (650) 725-3273 fax 725-6949
On 8/28/2012 11:32 AM, Martijn van Oosterhout wrote:
> On 28 August 2012 19:46, John Gerth <gerth at graphics.stanford.edu> wrote:
>> I believe what you want to use is "radium", an argus tool designed to take
>> a flow stream from the argus daemon and then deliver it simultaneously to
>> multiple clients. Each of those clients can have its own filtering specification
>> so that they receive only the flows of interest. See, 'man radium'
>
> But I'm not talking about live collection, I'm talking about getting
> this information from flows already on disk. Radium doesn't appear to
> read from disk at all.
>
More information about the argus
mailing list