Error: time syntax error cp

[David Edelman]

I think that this is the first time that I've seen an RTFM replay on this
list, I think that a more appropriate response might be:

Put a space between the minus sign and the filter expression. In your case

ra -r Desktop/salityv1.argus -s stime ltime dur saddr daddr state proto
bytes pkts flgs -z -  tcp  > sal.txt


Then you might want to look at the man page for ra to determine what a -t
option on the ra command line does.

--Dave



On 8/27/13 6:10 AM, "John Gerth" <gerth at graphics.stanford.edu> wrote:

>There's a trivial and very obvious typo in your commandline.
>Indeed, the error message points you right at it.
>
>Do "man ra" and read the output carefully. Actually, you should print
>it off and keep the paper in a convenient place for future reference.
>
>
>On 8/26/13 10:57 PM, Rahimeh Khodadadi wrote:
>> Hi all,
>> When I want to fiter TCP flow, gives an error:
>> 
>> ra -r Desktop/salityv1.argus -s stime ltime dur saddr daddr state proto
>>bytes pkts flgs -z -tcp  > sal.txt
>> 
>> 
>> ra[5639]: 10:25:48.549102 time syntax error cp
>> 
>> Please help me
>> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2442 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20130827/1eec1d80/attachment.bin>