Man page or keyword search:   man All Sections 1 - General Commands 2 - System Calls 3 - Subroutines, Functions 4 - Special Files 5 - File Formats 6 - Games and Screensavers 7 - Macros and Conventions 8 - Maintenence Commands 9 - Kernel Interface New Commands Server 4.4BSD AIX Alpinelinux Archlinux Aros BSDOS BSDi Bifrost CentOS Cygwin Darwin Debian DigitalUNIX DragonFly ElementaryOS Fedora FreeBSD Gentoo GhostBSD HP-UX Haiku Hurd IRIX Inferno JazzOS Kali Knoppix LinuxMint MacOSX Mageia Mandriva Manjaro Minix MirBSD NeXTSTEP NetBSD OPENSTEP OSF1 OpenBSD OpenDarwin OpenIndiana OpenMandriva OpenServer OpenSuSE OpenVMS Oracle PC-BSD Peanut Pidora Plan9 QNX Raspbian RedHat Scientific Slackware SmartOS Solaris SuSE SunOS Syllable Tru64 UNIXv7 Ubuntu Ultrix UnixWare Xenix YellowDog aLinux   14857 pages apropos Keyword Search (all sections) Output format html ascii pdf view pdf save postscript

RASTRIP(1)							    RASTRIP(1)

NAME
       rastrip - strip argus(8) data file.

COPYRIGHT
       Copyright (c) 2000-2008 QoSient. All rights reserved.

SYNOPSIS
       rastrip [-M [replace] [+|-]dsr [-M ...]]	 [raoptions]

DESCRIPTION
       Rastrip	reads argus data from an argus-data source, strips the records
       based on the criteria specified on the  command	line,  and  outputs  a
       valid  argus-stream.  This  is  useful to reduce the size of argus data
       files.  Rastrip always removes argus management transactions, thus hav‐
       ing the same effect as a 'not man' filter expression.

OPTIONS
       Rastrip,	 like  all  ra	based clients, supports a number of ra options
       including filtering of input argus records through a terminating filter
       expression.   See ra(1) for a complete description of ra options.  ras‐
       trip(1) specific options are:

       -M [replace] [+|-]dsr
	   Strip specified dsr (data structure record?).

	   Supported dsrs are:
	      flow   flow key data (proto, saddr, sport, dir, daddr, dport)
	      time   time stamp fields (stime, ltime).
	      metric basic ([s|d]bytes, [s|d]pkts, [s|d]rate, [s|d]load)
	      agr    aggregation stats (trans, avgdur, mindur, maxdur, stdev).
	      net    network objects (tcp, esp, rtp, icmp data).
	      vlan   VLAN tag data
	      mpls   MPLS label data
	      jitter Jitter data ([s|d]jit, [s|d]intpkt)
	      ipattr IP attributes ([s|d]ipid, [s|d]tos, [s|d]dsb, [s|d]ttl)
	      suser  src user captured data bytes (suser)
	      duser  dst captured user data bytes (duser)
	      mac    MAC addresses (smac, dmac)
	      icmp   ICMP specific data (icmpmap, inode)
	      encaps Flow encapsulation type indications

       If no dsrs are specified, Rastrip removes the following default set  of
       dsrs: encaps, agr, vlan, mpls, mac, icmp, ipattr, jitter, suser, duser

INVOCATION
       A  sample invocation of rastrip(1).  This call reads argus(8) data from
       inputfile and strips the default dsr set but keeps  MAC	addresses  and
       writes the result to outputfile:

       rastrip -M +mac -r inputfile -w outputfile

       This  call  removes  only user captured data and timings and writes the
       result to stdout:

       rastrip -M -suser -M -duser -M -time -r inputfile

SEE ALSO
       ra(1), rarc(5), argus(8),

FILES
AUTHORS
       Carter Bullard (carter@qosient.com).

BUGS
			       07 November 2000			    RASTRIP(1)

Vote for polarhome