1RAHOSTS(1) General Commands Manual RAHOSTS(1)
2
3
4
6 rahosts - report network addresses in argus(8) data.
7
9 Copyright (c) 2000-2003 QoSient. All rights reserved.
10
12 rahosts [ra-options] -M modes [ expression ]
13
15 Rahosts reads argus(8) data from an argus data source, and outputs a
16 list of sorted network addresses. Based on user supplied criteria,
17 rahosts can generate lists of IP addresses and/or MAC addresses, if
18 available. With IP addresses, rahosts can track the full network and
19 host address, or any network address, based on the mode indicated.
20
21 Like all ra based clients, rahosts supports a large number of options,
22 configuration through .rarc files, and input filtering using the termiā
23 nating filter expression.
24
25 See the ra(1) man page for details on ra-options and expression syntax.
26
27
29 -M mode
30 Specify mode of operation. Supported address modes are ip, ether
31 and all address types. The default is to output IP addresses.
32 When IP Addresses are being processed, the network address can be
33 specified with the additional modes class, classA, classB and
34 classC.
35
36
37
39 By default, rahosts will output the unique IP addresses seen in an
40 argus data stream. Using the -M mode options you can output all unique
41 class B network addresses that access the server narly.wave.com:
42
43 rahosts -r argus.data -M classB host narly.wave.com
44
45 Print the ethernet addresses used to support the HTTP service.
46
47 rahosts -r argus.data -M ether dst port http
48
49
51 Carter Bullard (carter@qosient.com).
52
54 ra(1), rarc(5),
55
56
57
58 07 January 2002 RAHOSTS(1)