[flow-tools] errata data attached to flows
Clayton Fiske
clay@bloomcounty.org
Wed, 29 Jan 2003 22:47:05 -0800
On Wed, Jan 29, 2003 at 05:55:47PM -0800, Bill Fumerola wrote:
>
> besides tags (which have some limitations - mostly due to time of tagging
> v. time of processing) is there a way for a ftlib program to store
> arbitrary metadata in a flow?
>
> nothing struck me as immediatly obvious when i looked, but i may be
> missing something.
Not sure how precise you need to be with the time info, but maybe
use a time matching filter with flow-nfilter and feed the output
into flow-tag? That could get messy quickly, but it would be one
way to associate a tag by time.
-c