finding where the file size difference is ?

[Carter Bullard]

Different versions of argus ???
Carter

On Aug 21, 2014, at 10:45 AM, mike tancsa <mike at sentex.ca> wrote:

> Hi Carter,
> 	While trying to slim down some argus logs, I was surprised that the resultant file was bigger.
> 
> e.g. old
> % ls -lh mpls-router.arg
> -rw-r--r--  1 root  wheel  -  743M Aug 21 10:31 mpls-router.arg
> 
> vs new
> 
> % ls -lh mpls-router.2014.08.21.00.00
> -rw-r--r--  1 root  wheel  -  967M Aug 21 10:26 mpls-router.2014.08.21.00.00
> 
> I created the new one with the command
> 
> ra -nr /var/log/argus/mpls-router.arg -w /var/log/argus/previous/mpls-router.2014.08.21.00.00 - not dst port 561 and not dst host 199.212.135.93 and not ether proto llc and not man
> 
> I dont understand why it would be bigger ?
> 
> 	---Mike
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 455 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20140821/1b348ff1/attachment.sig>