Collecting multiple types of information at once

John Gerth gerth at graphics.stanford.edu
Tue Aug 28 15:56:21 EDT 2012


>From the radium man page:
  "Radium,  like  all ra based clients, supports a number of ra options including remote data access, reading from
       multiple files and filtering of input argus records through a terminating filter  expression."

I just tried to use "radium -r ...." on a days worth of hourly files here and  while one can
connect multiple clients to it, I can certainly believe that the behavior might not enable what you want.

In any event, I obviously did misunderstand your scenario and for that I apologize.

/John

John Gerth      gerth at graphics.stanford.edu  Gates 378   (650) 725-3273 fax 725-6949

On 8/28/2012 11:32 AM, Martijn van Oosterhout wrote:
> On 28 August 2012 19:46, John Gerth <gerth at graphics.stanford.edu> wrote:
>> I believe what you want to use is "radium", an argus tool designed to take
>> a flow stream from the argus daemon and then deliver it simultaneously to
>> multiple clients.  Each of those clients can have its own filtering specification
>> so that they receive only the flows of interest. See, 'man radium'
> 
> But I'm not talking about live collection, I'm talking about getting
> this information from flows already on disk. Radium doesn't appear to
> read from disk at all.
> 



More information about the argus mailing list