man ralabel (1): inserts fixed form or free form metadata labels into argus(8).

SYNOPSIS

ralabel -f address.file [raoptions] [-- filter-expression]

DESCRIPTION

Ralabel reads argus data from an argus-data source, and selects records that include IP addresses specified by the address.spec file. This program provides high performance address matching for any number of addresses.

RALABEL ADDRESS SPECIFICATION

Ralabel, reads a number of standard IANA IP address file formats that specific IPv4 addresses, CIDR addresses and IPV4 prefix address specification. Examples of these file types are provided in ./support/Config.

ralabel(1) specific options are:

-f label.strategy.specification.file

INVOCATION

This invocation reads argus(8) data from argusfile and labels records that match any options in the ralabel.conf file.

 
   ralabel -r argusfile -f ralabel.conf - ip

COPYRIGHT

AUTHORS

Carter Bullard (carter@qosient.com).