|
NAMErwappend - Append SiLK Flow file(s) to an existing SiLK Flow fileSYNOPSISrwappend [--create=[TEMPLATE_FILE]] [--print-statistics] [--site-config-file=FILENAME] TARGET_FILE SOURCE_FILE [SOURCE_FILE...] rwappend --help rwappend --version DESCRIPTIONrwappend reads SiLK Flow records from the specified SOURCE_FILEs and appends them to the TARGET_FILE. If "stdin" is used as the name of one of the SOURCE_FILEs, SiLK flow records will be read from the standard input.When the TARGET_FILE does not exist and the --create switch is not provided, rwappend will exit with an error. When --create is specified and TARGET_FILE does not exist, rwappend will create the TARGET_FILE using the same format, version, and byte-order as the specified TEMPLATE_FILE. If no TEMPLATE_FILE is given, the TARGET_FILE is created in the default format and version (the same format that rwcat(1) would produce). The TARGET_FILE must be an actual file---it cannot be a named pipe or the standard output. In addition, the header of TARGET_FILE must not be compressed; that is, you cannot append to a file whose entire contents has been compressed with gzip (those files normally end in the ".gz" extension). OPTIONSOption names may be abbreviated if the abbreviation is unique or is an exact match for an option. A parameter to an option may be specified as --arg=param or --arg param, though the first form is required for options that take optional parameters.
EXAMPLESIn the following examples, the dollar sign ("$") represents the shell prompt. The text after the dollar sign represents the command line. Lines have been wrapped for improved readability, and the back slash ("\") is used to indicate a wrapped line.Standard usage where the file to append to, results.rw, exists: $ rwappend results.rw sample5.rw sample6.rw To append files sample*.rw to results.rw, or to create results.rw using the same format as the first file argument (note that sample1.rw must be repeated): $ rwappend results.rw --create=sample1.rw \ sample1.rw sample2.rw If results.rw does not exist, the following two commands are equivalent: $ rwappend --create results.rw sample1.rw sample2.rw $ rwcat sample1.rw sample2.rw > results.rw ENVIRONMENT
FILES
SEE ALSOrwcat(1), silk(7)BUGSWhen a SOURCE_FILE contains IPv6 flow records and the TARGET_FILE only supports IPv4 records, rwappend converts IPv6 records that contain addresses in the ::ffff:0:0/96 prefix to IPv4 and writes them to the TARGET_FILE. rwappend silently ignores IPv6 records having addresses outside of that prefix.rwappend makes some attempts to avoid appending a file to itself (which would eventually exhaust the disk space) by comparing the names of files it is given; it should be smarter about this.
Visit the GSP FreeBSD Man Page Interface. |