Sophie: argus-clients-2.0.6.fixes.1-19.fc12 i686

argus-clients-2.0.6.fixes.1-19.fc12.i686.rpm

Content-type: text/html

<HTML><HEAD><TITLE>Manpage of RASORT</TITLE>
</HEAD><BODY>
<H1>RASORT</H1>
Section: User Commands  (1)<BR>Updated: 07 November 2000<BR><A HREF="#index">Index</A>
<A HREF="http://localhost/cgi-bin/man/man2html">Return to Main Contents</A><HR>

<A NAME="lbAB">&nbsp;</A>
<H2>NAME</H2>

<B>rasort</B> - sort <B><A HREF="http://localhost/cgi-bin/man/man2html?8+argus">argus</A>(8)</B> data file.
<A NAME="lbAC">&nbsp;</A>
<H2>SYNOPSIS</H2>

<B>rasort</B>

[[<B>-s</B> <I>sortfield</I>] [<B>-s</B> <I>sortfield</I>] ...]
[<B>raoptions</B>]
<A NAME="lbAD">&nbsp;</A>
<H2>COPYRIGHT</H2>

Copyright (c) 2000 QoSient, LLC   All rights reserved.
<A NAME="lbAE">&nbsp;</A>
<H2>DESCRIPTION</H2>

<A NAME="ixAAB"></A>
<P>

<B>Rasort</B>

reads
<B>argus</B>

data from an <I>argus-data</I> source, sorts the records based on
the criteria specified on the command line, and outputs a valid
<I>argus-stream</I>.
<A NAME="lbAF">&nbsp;</A>
<H2>OPTIONS</H2>

Rasort, like all ra based clients, supports a number of
<B>ra options</B> including filtering of input argus
records through a terminating filter expression.
See <B><A HREF="http://localhost/cgi-bin/man/man2html?1+ra">ra</A>(1)</B> for a complete description of <B>ra options</B>.
<B><A HREF="http://localhost/cgi-bin/man/man2html?1+rasort">rasort</A>(1)</B> specific options are:
<P>


<DL COMPACT>
<DT><B>-s</B><I> sortfield</I>

<DD>
Supported sortfields are:
</DL>
<P>

<DL COMPACT><DT><DD>
<DL COMPACT>
<DT><B>startime</B>

<DD>
record start time &lt;default&gt;
<DT><B>lasttime</B>

<DD>
record last time.
<DT><B>duration</B>

<DD>
record duration.
<DT><B>srcaddr</B>

<DD>
source IP addr.
<DT><B>dstaddr</B>

<DD>
destination IP addr.
<DT><B>proto</B>

<DD>
transaction protocol.
<DT><B>sport</B>

<DD>
source port number.
<DT><B>dport</B>

<DD>
destination port number.
<DT><B>stos</B>

<DD>
source TOS byte value.
<DT><B>dtos</B>

<DD>
destination TOS byte value.
<DT><B>sttl</B>

<DD>
src -&gt; dst TTL value.
<DT><B>dttl</B>

<DD>
dst -&gt; src TTL value.
<DT><B>bytes</B>

<DD>
total transaction bytes.
<DT><B>srcbytes</B>

<DD>
src -&gt; dst transaction bytes.
<DT><B>dstbytes</B>

<DD>
dst -&gt; src transaction bytes.
<DT><B>packets</B>

<DD>
total transaction packet count.
<DT><B>srcpackets</B>

<DD>
src -&gt; dst packet count.
<DT><B>dstpackets</B>

<DD>
dst -&gt; src packet count.

</DL>
</DL>

<P>
<A NAME="lbAG">&nbsp;</A>
<H2>INVOCATION</H2>

A sample invocation of <B><A HREF="http://localhost/cgi-bin/man/man2html?1+rasort">rasort</A>(1)</B>.  This call reads <B><A HREF="http://localhost/cgi-bin/man/man2html?8+argus">argus</A>(8)</B> data
from <B>inputfile</B> and sorts the IP protocol based <B><A HREF="http://localhost/cgi-bin/man/man2html?8+argus">argus</A>(8)</B> data, first
by the destination IP address, then by the service (destination) port number
and then by the source IP address, and writes the results to stdout.
For most services, this arranges <B><A HREF="http://localhost/cgi-bin/man/man2html?8+argus">argus</A>(8)</B> formatted data by server,
service, and then by client.
<DL COMPACT>
<DT><B>rasort</B> -r inputfile -s dstaddr -s dport -s srcaddr - ip<DD>
</DL>
<A NAME="lbAH">&nbsp;</A>
<H2>SEE ALSO</H2>

<B><A HREF="http://localhost/cgi-bin/man/man2html?1+ra">ra</A>(1),</B>

<B><A HREF="http://localhost/cgi-bin/man/man2html?5+rarc">rarc</A>(5),</B>

<B><A HREF="http://localhost/cgi-bin/man/man2html?8+argus">argus</A>(8),</B>

<B><A HREF="http://localhost/cgi-bin/man/man2html?1+tcpdump">tcpdump</A>(1)</B>

<A NAME="lbAI">&nbsp;</A>
<H2>FILES</H2>

<P>
<A NAME="lbAJ">&nbsp;</A>
<H2>AUTHORS</H2>

<PRE>
Carter Bullard (<A HREF="mailto:carter@qosient.com">carter@qosient.com</A>).
</PRE>

<A NAME="lbAK">&nbsp;</A>
<H2>BUGS</H2>

<P>

<HR>
<A NAME="index">&nbsp;</A><H2>Index</H2>
<DL>
<DT><A HREF="#lbAB">NAME</A><DD>
<DT><A HREF="#lbAC">SYNOPSIS</A><DD>
<DT><A HREF="#lbAD">COPYRIGHT</A><DD>
<DT><A HREF="#lbAE">DESCRIPTION</A><DD>
<DT><A HREF="#lbAF">OPTIONS</A><DD>
<DT><A HREF="#lbAG">INVOCATION</A><DD>
<DT><A HREF="#lbAH">SEE ALSO</A><DD>
<DT><A HREF="#lbAI">FILES</A><DD>
<DT><A HREF="#lbAJ">AUTHORS</A><DD>
<DT><A HREF="#lbAK">BUGS</A><DD>
</DL>
<HR>
This document was created by
<A HREF="http://localhost/cgi-bin/man/man2html">man2html</A>,
using the manual pages.<BR>
Time: 23:40:28 GMT, March 15, 2001
</BODY>
</HTML>