finding where the file size difference is ?

[mike tancsa]

Hi Carter,
	While trying to slim down some argus logs, I was surprised that the 
resultant file was bigger.

e.g. old
% ls -lh mpls-router.arg
-rw-r--r--  1 root  wheel  -  743M Aug 21 10:31 mpls-router.arg

vs new

% ls -lh mpls-router.2014.08.21.00.00
-rw-r--r--  1 root  wheel  -  967M Aug 21 10:26 mpls-router.2014.08.21.00.00

I created the new one with the command

ra -nr /var/log/argus/mpls-router.arg -w 
/var/log/argus/previous/mpls-router.2014.08.21.00.00 - not dst port 561 
and not dst host 199.212.135.93 and not ether proto llc and not man

I dont understand why it would be bigger ?

	---Mike