[flow-tools] errata data attached to flows

Clayton Fiske clay@bloomcounty.org
Wed, 29 Jan 2003 22:47:05 -0800


On Wed, Jan 29, 2003 at 05:55:47PM -0800, Bill Fumerola wrote:
> 
> besides tags (which have some limitations - mostly due to time of tagging
> v. time of processing) is there a way for a ftlib program to store
> arbitrary metadata in a flow?
> 
> nothing struck me as immediatly obvious when i looked, but i may be
> missing something.

Not sure how precise you need to be with the time info, but maybe
use a time matching filter with flow-nfilter and feed the output
into flow-tag? That could get messy quickly, but it would be one
way to associate a tag by time.

-c