1RALABEL(1) General Commands Manual RALABEL(1)
2
3
4
6 ralabel - inserts fixed form or free form metadata labels into
7 argus(8). ralabel supports a number of strategies for labeling includ‐
8 ing 1) address based, providing free form metadata, country code, geo
9 data and fully qualified domain name (FQDN) labeling; 2)port based,
10 providing free form labels using IANA port definitions, and 3) flow
11 filter, providing free form labels based on argus filter specicfica‐
12 tions.
13
14
15
17 ralabel -f address.file [raoptions] [-- filter-expression]
18
20 Ralabel reads argus data from an argus-data source, and selects records
21 that include IP addresses specified by the address.spec file. This
22 program provides high performance address matching for any number of
23 addresses.
24
25
27 Ralabel, reads a number of standard IANA IP address file formats that
28 specific IPv4 addresses, CIDR addresses and IPV4 prefix address speci‐
29 fication. Examples of these file types are provided in ./support/Con‐
30 fig.
31
32 ralabel(1) specific options are:
33
34 -f label.strategy.specification.file
35
36
38 This invocation reads argus(8) data from argusfile and labels records
39 that match any options in the ralabel.conf file.
40
41 ralabel -r argusfile -f ralabel.conf - ip
42
43
44
46 Copyright (c) 2000-2016 QoSient. All rights reserved.
47
48
50 ralabel.conf.5, ra(1), rarc(5), argus(8),
51
52
54 Carter Bullard (carter@qosient.com).
55
56
57
58ralabel 3.0.8 12 August 2003 RALABEL(1)