RALABEL(1)

💖 ralabel — bestie edition 💖

ok so real talk, ralabel is the ralabel command from the General Commands Manual, and she is that girl. she inserts fixed form or free form metadata labels into argus(8) ✨ and ngl she has a whole wardrobe of labeling strategies, not just one look:

• address based — gives you free form metadata, country code, geo data and fully qualified domain name (FQDN) labeling 🗺️
• port based — free form labels using IANA port definitions 🔌
• flow filter — free form labels based on argus filter specicfications 🦋

she's literally serving range, periodt.

---

✨ SYNOPSIS ✨

ralabel -f address.file [-M addr] [-m mask] [raoptions] [-- filter-expression]

that's the whole fit. 💅

---

🌸 DESCRIPTION 🌸

okay so here's the tea, bestie: Ralabel reads argus data from an argus-data source, and selects records that include IP addresses specified by the address.spec file. that's the vibe check she's passing.

and the iconique part? this program provides high performance address matching for any number of addresses. like, ANY number. she does not fold under pressure. main character energy fr fr 👑

---

🎀 RALABEL ADDRESS SPECIFICATION 🎀

Ralabel reads a number of standard IANA IP address file formats that specific IPv4 addresses, CIDR addresses and IPV4 prefix address specification. she's flexible like that, no cap.

examples of these file types are provided in ./support/Config — go look, it's giving reference material 🫶

---

🦋 OPTIONS 🦋

• -f label.strategy.specification.file — hand her a label specification file, bestie. that's the whole ask.
• -M addr — if the label specification is a simple address list, specify this option. simple list, simple life ✨
• -m saddr, daddr — for IANA address labeling, specify which address should be labeled (default saddr and daddr). so you can tell her which one to tag, or just let her do both because she's generous like that 💖

---

🌈 INVOCATION 🌈

this invocation reads argus(8) data from argusfile and labels records that match any options in the ralabel.conf file:

ralabel -r argusfile -f ralabel.conf - ip

copy it, paste it, slay it. 💅

---

👑 COPYRIGHT 👑

Copyright (c) 2000-2024 QoSient. All rights reserved.

(the lawyers said it, not me 🙈)

---

💜 SEE ALSO 💜

ralabel.conf.5, ra(1), rarc(5), argus(8),

go read the whole family, iykyk 📚

---

⭐ AUTHORS ⭐

Carter Bullard (carter@qosient.com).

---

ok that's the page!! this was ralabel version 5.0.3, dated 12 August 2023, and she ate, no crumbs left 🍓🧚💖