getting lost among so many digits in large byte count numbers

Carter Bullard carter at qosient.com
Tue Jan 24 10:37:39 EST 2012


The dates are doing that because you are not adding the %f to the time string.
My bad.  I'll check for this before I trim the string.  And with -p0, who uses that ;o)
I'll fix that bug as well.

Thanks for the comments, I'll make these changes in the next few days.
Carter


On Jan 24, 2012, at 6:09 AM, The Branches wrote:

> Hi Carter,
> 
> Thanks!  I am very glad to have the -H option available in the ra- clients.  
> Here is some feedback on the related -p option:
>     Using a -p values of less than 6 is chopping off the end of the date string which in the default format is not a candidate for that.  For example, with "-p 0" I see dates like "01/17/12 00:01:27" getting chopped down to "01/17/12 00*".  I can rectify this by adding "-s -stime +0stime:17" though it would be nice if the rounding logic would stay away from non-decimal date formats.
>     It looks a little awkward to me to have a period followed by no further numbers when using -p0.  5K looks cleaner to me than 5.K, though it is not a big deal.  
>     I like the way you keep the decimal points lined up from record to record regardless of whether a K/M/G label was called for or not.
> 
> Kevin
> 
> 
> On 1/23/2012 10:50 PM, Carter Bullard wrote:
>> 
>> Hey Kevin,
>> The new clients have support for the -H option to print all numerics using abbreviations.
>> Will print out to 3 decimal places, and no larger, but the "-p value" option can reduce that
>> number if you need it.
>> 
>> Please give it a try, and tell me if its what you're looking for.
>> Carter
>> 
>> On Jan 23, 2012, at 5:07 PM, The Branches wrote:
>> 
>>> Carter,
>>> 
>>> I have never tried using ratop on historical argus data files.  I just tried it at your suggestion and I like it, especially with that H key for unit labels.  
>>> 
>>> You are welcome to do whatever you like with my script.  It does need some tweaking to be of better use for a general audience, as I recently noticed that it 
>>> is catching 5-digit port numbers in ra- output and putting units on them erroneously in its present form.
>>> 
>>> However, if most everything is already there to take advantage of putting unit labels on large numeric values natively in the ra- commands, by all means please do that.  I'd choose that over a post-processing script any day.  An "-H" option would be very cool for me.  Thanks for offering!
>>> 
>>> Kevin
>>> 
>>> 
>>> 
>>> On 1/19/2012 7:10 PM, Carter Bullard wrote:
>>>> 
>>>> Hey Kevin,
>>>> This is very cool !!!!  How would you like for me to post it?
>>>> We can leave it in the email, as it will be captured in the mail archive,
>>>> or we can add a shell script that does this in a single command.
>>>> Very cool !!!!
>>>> 
>>>> I do apologize, and its my fault that I haven't done more in the documentation.
>>>> We do have this kind of support in the clients library, and the function you
>>>> provided is available in ratop.1.  I will make some changes to make it
>>>> available to all the ra* programs, if you like.
>>>> 
>>>> I have envisioned ratop.1 as the client of choice to browse files and
>>>> to provide a real-time interface.  Try your racluster command, but using
>>>> ratop.1 instead.
>>>> 
>>>>    ratop -m saddr -r /argus/today/unt-08.arg
>>>> 
>>>> The idea is that ratop will read the data and provide a curses screen
>>>> that in real time will display the aggregated output.  Its got a real-time
>>>> component to it, so you'll see the data accumulating, right before your eyes.
>>>> 
>>>> ratop.1 is like 'vi', in that you will have at the bottom of the screen
>>>> a status line.   If you type '/', you go into search mode, and you can type
>>>> any string, then carriage return, and like 'vi', the cursor will bounce to that
>>>> string in the developing flow cache display that ratop.1 is printing.  'vi'
>>>> navigation commands like 'n', 'N' will go to the next or previous occurence
>>>> of the string…..
>>>> 
>>>> if you type ':' you will be in command mode and you can type options and
>>>> commands.  Command 'h', will print out the help screen.  Using the
>>>> ':' command method, you can change the sorting algorithm on the fly
>>>> (command 's'), you can change the fields (command 'F'), and command 'H'
>>>> will turn abbreviations on and off.
>>>> 
>>>> At anytime type command 'H' while ratop is reading data, and most of the
>>>> numeric metrics, such as bytes, appbytes, packet counts, rates, loads, etc….
>>>> will be converted to the appropriate abbreviations.  'H' is a toggle, so you
>>>> can hit it as many time as you like to flip the abbreviations, and when you're
>>>> done, carriage return will put ratop.1 back into navigation mode.
>>>> 
>>>> I was reluctant to provide this as an option, as I need another letter to turn
>>>> it on, and we're running out of letters.  Only rahisto() currently uses the -H option,
>>>> to provide histogram options.  For ra.1, I can use the -H option to print values using
>>>> these abbreviations, if that will work for you.
>>>> 
>>>> Try ratop.1 to see if you like how I did it.  The letters are right next to the numbers,
>>>> and the precision is specified using the -p option, so you can change the
>>>> numbers right of the decimal.  If that works, I'll turn on the "-H" option to
>>>> do this for all ra* programs.
>>>> 
>>>> Carter
>>>> 
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20120124/c2ee1310/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4367 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20120124/c2ee1310/attachment.bin>


More information about the argus mailing list