getting lost among so many digits in large byte count numbers
Carter Bullard
carter at qosient.com
Tue Jan 24 10:37:39 EST 2012
The dates are doing that because you are not adding the %f to the time string.
My bad. I'll check for this before I trim the string. And with -p0, who uses that ;o)
I'll fix that bug as well.
Thanks for the comments, I'll make these changes in the next few days.
Carter
On Jan 24, 2012, at 6:09 AM, The Branches wrote:
> Hi Carter,
>
> Thanks! I am very glad to have the -H option available in the ra- clients.
> Here is some feedback on the related -p option:
> Using a -p values of less than 6 is chopping off the end of the date string which in the default format is not a candidate for that. For example, with "-p 0" I see dates like "01/17/12 00:01:27" getting chopped down to "01/17/12 00*". I can rectify this by adding "-s -stime +0stime:17" though it would be nice if the rounding logic would stay away from non-decimal date formats.
> It looks a little awkward to me to have a period followed by no further numbers when using -p0. 5K looks cleaner to me than 5.K, though it is not a big deal.
> I like the way you keep the decimal points lined up from record to record regardless of whether a K/M/G label was called for or not.
>
> Kevin
>
>
> On 1/23/2012 10:50 PM, Carter Bullard wrote:
>>
>> Hey Kevin,
>> The new clients have support for the -H option to print all numerics using abbreviations.
>> Will print out to 3 decimal places, and no larger, but the "-p value" option can reduce that
>> number if you need it.
>>
>> Please give it a try, and tell me if its what you're looking for.
>> Carter
>>
>> On Jan 23, 2012, at 5:07 PM, The Branches wrote:
>>
>>> Carter,
>>>
>>> I have never tried using ratop on historical argus data files. I just tried it at your suggestion and I like it, especially with that H key for unit labels.
>>>
>>> You are welcome to do whatever you like with my script. It does need some tweaking to be of better use for a general audience, as I recently noticed that it
>>> is catching 5-digit port numbers in ra- output and putting units on them erroneously in its present form.
>>>
>>> However, if most everything is already there to take advantage of putting unit labels on large numeric values natively in the ra- commands, by all means please do that. I'd choose that over a post-processing script any day. An "-H" option would be very cool for me. Thanks for offering!
>>>
>>> Kevin
>>>
>>>
>>>
>>> On 1/19/2012 7:10 PM, Carter Bullard wrote:
>>>>
>>>> Hey Kevin,
>>>> This is very cool !!!! How would you like for me to post it?
>>>> We can leave it in the email, as it will be captured in the mail archive,
>>>> or we can add a shell script that does this in a single command.
>>>> Very cool !!!!
>>>>
>>>> I do apologize, and its my fault that I haven't done more in the documentation.
>>>> We do have this kind of support in the clients library, and the function you
>>>> provided is available in ratop.1. I will make some changes to make it
>>>> available to all the ra* programs, if you like.
>>>>
>>>> I have envisioned ratop.1 as the client of choice to browse files and
>>>> to provide a real-time interface. Try your racluster command, but using
>>>> ratop.1 instead.
>>>>
>>>> ratop -m saddr -r /argus/today/unt-08.arg
>>>>
>>>> The idea is that ratop will read the data and provide a curses screen
>>>> that in real time will display the aggregated output. Its got a real-time
>>>> component to it, so you'll see the data accumulating, right before your eyes.
>>>>
>>>> ratop.1 is like 'vi', in that you will have at the bottom of the screen
>>>> a status line. If you type '/', you go into search mode, and you can type
>>>> any string, then carriage return, and like 'vi', the cursor will bounce to that
>>>> string in the developing flow cache display that ratop.1 is printing. 'vi'
>>>> navigation commands like 'n', 'N' will go to the next or previous occurence
>>>> of the string…..
>>>>
>>>> if you type ':' you will be in command mode and you can type options and
>>>> commands. Command 'h', will print out the help screen. Using the
>>>> ':' command method, you can change the sorting algorithm on the fly
>>>> (command 's'), you can change the fields (command 'F'), and command 'H'
>>>> will turn abbreviations on and off.
>>>>
>>>> At anytime type command 'H' while ratop is reading data, and most of the
>>>> numeric metrics, such as bytes, appbytes, packet counts, rates, loads, etc….
>>>> will be converted to the appropriate abbreviations. 'H' is a toggle, so you
>>>> can hit it as many time as you like to flip the abbreviations, and when you're
>>>> done, carriage return will put ratop.1 back into navigation mode.
>>>>
>>>> I was reluctant to provide this as an option, as I need another letter to turn
>>>> it on, and we're running out of letters. Only rahisto() currently uses the -H option,
>>>> to provide histogram options. For ra.1, I can use the -H option to print values using
>>>> these abbreviations, if that will work for you.
>>>>
>>>> Try ratop.1 to see if you like how I did it. The letters are right next to the numbers,
>>>> and the precision is specified using the -p option, so you can change the
>>>> numbers right of the decimal. If that works, I'll turn on the "-H" option to
>>>> do this for all ra* programs.
>>>>
>>>> Carter
>>>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20120124/c2ee1310/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4367 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20120124/c2ee1310/attachment.bin>
More information about the argus
mailing list