rahosts(1)

1RAHOSTS(1)                  General Commands Manual                 RAHOSTS(1)
2
3
4

NAME

6       rahosts - report network addresses in argus(8) data.
7

COPYRIGHT

9       Copyright (c) 2000-2003 QoSient. All rights reserved.
10

SYNOPSIS

12       rahosts [ra-options] -M modes [ expression ]
13

DESCRIPTION

15       Rahosts  reads  argus(8)  data from an argus data source, and outputs a
16       list of sorted network addresses.  Based  on  user  supplied  criteria,
17       rahosts  can  generate  lists  of IP addresses and/or MAC addresses, if
18       available.  With IP addresses, rahosts can track the full  network  and
19       host address, or any network address, based on the mode indicated.
20
21       Like  all ra based clients, rahosts supports a large number of options,
22       configuration through .rarc files, and input filtering using the termi‐
23       nating filter expression.
24
25       See the ra(1) man page for details on ra-options and expression syntax.
26
27

RAHOSTS SPECIFIC OPTIONS

29       -M mode
30            Specify  mode of operation.  Supported address modes are ip, ether
31            and all address types.  The default is  to  output  IP  addresses.
32            When  IP Addresses are being processed, the network address can be
33            specified with the additional  modes  class,  classA,  classB  and
34            classC.
35
36
37

EXAMPLES

39       By  default,  rahosts  will  output  the unique IP addresses seen in an
40       argus data stream.  Using the -M mode options you can output all unique
41       class B network addresses that access the server narly.wave.com:
42
43              rahosts -r argus.data -M classB host narly.wave.com
44
45       Print the ethernet addresses used to support the HTTP service.
46
47              rahosts -r argus.data -M ether dst port http
48
49

AUTHORS

51       Carter Bullard (carter@qosient.com).
52