1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
|
.\"
.\" Argus-5.0 Software
.\" Copyright (c) 2000-2024 QoSient, LLC
.\" All rights reserved.
.\"
.\"
.TH RAFILTERADDR 1 "12 August 2023" "rafilteraddr 5.0.3"
.SH NAME
\fBrafilteraddr\fP \- select \fBargus(8)\fP data based on an IANA IP address file.
.SH SYNOPSIS
.B rafilteraddr
\fB[\-f\fP \fIaddress.file\fP [\fB [\-v] [\fBraoptions\fP] [\fB--\fP \fIfilter-expression\fP]
.SH DESCRIPTION
.IX "rafilteraddr command" "" "\fBrafilteraddr\fP \(em argus data"
.LP
\fBRafilteraddr\fP reads
.BR argus
data from an \fIargus-data\fP source, and selects records that include IP addresses
specified by the \fBaddress.spec\fP file. This program provides high performance
address matching for any number of addresses.
.SH RAFILTERADDR ADDRESS SPECIFICATION
Rafilteraddr, reads a number of standard IANA IP address file formats that
specify IPv4, CIDR and IPV4 prefix addresses. Examples of these file types
are provided in ./support/Config.
\fBrafilteraddr(1)\fP specific options are:
.TP 4 4
.B \-f <IPv4 address specification>>
Specify the list of addresses used for the address filter. This file can be in
several IANA based address specification formats, and is the same format as
the address labels for \fBralabel.1\fP.
.TP 4 4
.BI \-v
Invert the logic and print flows that don't match any of the addresses.
.SH INVOCATION
This invocation reads \fBargus(8)\fP data from \fBargusfile\fP and prints
records that match any of the IP addresses in the iana-ipv4-addresses.
.nf
\fBrafilteraddr\fP -r argusfile -f iana-ipv4-addresses -- ip
.fi
An example address specification that describes a mix of CIDR addresses,
IPv4 address ranges and explicit addresses:
.nf
192.168.0.0/24
192.168.1.3-192.168.2.45
207.237.36.98
.fi
.SH COPYRIGHT
Copyright (c) 2000-2024 QoSient. All rights reserved.
.SH SEE ALSO
.BR ralabel.conf.5,
.BR ra(1),
.BR rarc(5),
.BR argus(8),
.SH AUTHORS
.nf
Carter Bullard (carter@qosient.com).
.fi
|
