rarc reference

#RACLUSTER_MODEL_NAME=Test Configuration
#RACLUSTER_PRESERVE_FIELDS=yes
#RACLUSTER_REPORT_AGGREGATION=no
#RACLUSTER_AUTO_CORRECTION=yes
#RACLUSTER_AGG_METRIC="dur"
filter="icmp"          model="saddr daddr proto dport sport "      status=60  idle=30
filter="arp"           model="saddr daddr proto dport sport "      status=120 idle=60
filter="tcp or udp"    model="saddr daddr proto dport"             status=120 idle=3600  cont
label="Class-Video"    model="srcid saddr daddr proto dport sport" status=5   idle=10
filter="tcp or udp"    model="saddr daddr proto dport"             status=30  idle=120
filter=""              model="saddr daddr proto"                   status=300 idle=3600
#   VARIABLE=
# with no white space between the VARIABLE and the '=' sign.
#RADIUM_DAEMON=yes
#RADIUM_MONITOR_ID=`hostname`    // IPv4 address returned
#RADIUM_MONITOR_ID=10.2.45.3     // IPv4 address
#RADIUM_MONITOR_ID=2435          // Number
#RADIUM_MONITOR_ID="en0"         // String
#RADIUM_DEBUG_LEVEL=0
RADIUM_MAR_STATUS_INTERVAL=60
#RADIUM_ARGUS_SERVER=amon
#RADIUM_ARGUS_SERVER=argus
#RADIUM_ARGUS_SERVER=argus-tcp
#RADIUM_ARGUS_SERVER=argus-udp
#RADIUM_ARGUS_SERVER=cisco
#RADIUM_FILTER=""
#RADIUM_ADJUST_TIME=5
#RADIUM_FILTER_OPTIMIZER=yes
#RADIUM_CISCONETFLOW_PORT=9996
# RADIUM_USER_AUTH="user_id/authorization_id"
#RADIUM_USER_AUTH="user/auth"
#RADIUM_AUTH_PASS="password"
#RADIUM_ACCESS_PORT=561
#RADIUM_BIND_IP=127.0.0.1
#      RADIUM_OUTPUT_FILE=/full/path/file/name
#      RADIUM_OUTPUT_FILE=/full/path/file/name "filter"
#RADIUM_OUTPUT_FILE=/var/log/radium/radium.out
#      RADIUM_OUTPUT_STREAM="URI [filter]"
#      RADIUM_OUTPUT_STREAN="argus-udp
#RADIUM_OUTPUT_STREAM=argus-udp
#RADIUM_CHROOT_DIR="/tmp"
#RADIUM_SETUSER_ID=user
#RADIUM_SETGROUP_ID=group
#RADIUM_CLASSIFIER_FILE=/usr/local/argus/ralabel.conf
#RALABEL_IANA_ADDRESS=yes
#RALABEL_IANA_ADDRESS_FILE="/usr/local/argus/iana-address-file"
#RALABEL_ARIN_COUNTRY_CODES=yes
#RA_DELEGATED_IP="/usr/local/argus/delegated-ipv4-latest"
#RALABEL_BIND_NAME="all"
#RALABEL_IANA_PORT=yes
#RALABEL_IANA_PORT_FILE="/usr/local/argus/iana-port-numbers"
#RALABEL_ARGUS_FLOW=yes
#RALABEL_ARGUS_FLOW_FILE="/usr/local/argus/argus-flow-file"
RALABEL_GEOIP_ASN=yes
RALABEL_GEOIP_ASN_FILE="/usr/local/share/GeoIP/GeoIPASNum.dat"
#       RALABEL_GEOIP_CITY="saddr,daddr
#       RALABEL_GEOIP_CITY="*
RALABEL_GEOIP_CITY="saddr,daddr,inode
RALABEL_GEOIP_CITY_FILE="/usr/local/share/GeoIP/GeoIPCity.dat"
RANON_SEED=29384938
RANON_TRANSREFNUM_OFFSET=fixed
RANON_SEQNUM_OFFSET=fixed
RANON_TIME_SEC_OFFSET=random
RANON_TIME_USEC_OFFSET=random
RANON_ETHERNET_ANONYMIZATION=sequential
RANON_PRESERVE_ETHERNET_VENDOR=no
RANON_PRESERVE_ETHERNET_BROADCAST=yes
RANON_PRESERVE_ETHERNET_MULTICAST=yes
RANON_NET_ANONYMIZATION=sequential
RANON_HOST_ANONYMIZATION=sequential
RANON_AS_ANONYMIZATION=sequential
RANON_NETWORK_ADDRESS_LENGTH=24
#RANON_SPECIFY_NET_TRANSLATION=192.168.0/24
#RANON_SPECIFY_NET_TRANSLATION=64.12.0/24
#RANON_SPECIFY_NET_TRANSLATION=128.2/24.0
#RANON_SPECIFY_HOST_TRANSLATION=192.168.0.64
RANON_PRESERVE_NET_ADDRESS_HIERARCHY=cidr/24
#RANON_PRESERVE_NET_ADDRESS_HIERARCHY=class
RANON_PRESERVE_BROADCAST_ADDRESS=yes
RANON_PRESERVE_MULTICAST_ADDRESS=yes
RANON_PRESERVE_IP_ID=fixed
RANON_PRESERVE_ICMPMAPPED_TTL=yes
RANON_PRESERVE_IP_TTL=fixed
RANON_PRESERVE_IP_TOS=fixed
RANON_PRESERVE_IP_TOS=fixed
RANON_PRESERVE_WELLKNOWN_PORT_NUMS=yes
RANON_PRESERVE_REGISTERED_PORT_NUMS=no
RANON_PRESERVE_PRIVATE_PORT_NUMS=no
RANON_PORT_METHOD="offset
RA_PRINT_LABELS=0
RA_FIELD_DELIMITER=','
RA_USEC_PRECISION=6
RA_PRINT_NAMES=port
RA_FIELD_SPECIFIER= srcid rank seq autoid stime ltime dur idle sstime sltime sdur ddur dstime dltime rtime offset srng erng trans flgs mean stddev min max sum snet saddr dir dnet daddr proto sport dport sco dco stos dtos sdsb ddsb sttl dttl shops dhops sipid dipid pkts spkts dpkts bytes sbytes dbytes appbytes sappbytes dappbytes load sload dload rate srate drate loss sloss dloss ploss sploss dploss retrans sretrans dretrans pretrans spretrans dpretrans sgap dgap nstroke snstroke dnstroke senc denc bssid ssid soui doui smac dmac sas das ias smpls dmpls svlan dvlan svid dvid svpri dvpri sintpkt dintpkt sintpktact dintpktact sintpktidl dintpktidl sintpktmax sintpktmin dintpktmax dintpktmin sintpktactmax sintpktactmin dintpktactmax dintpktactmin sintpktidlmax sintpktidlmin dintpktidlmax dintpktidlmin sjit djit sjitact djitact sjitidl djitidl state cause resp dldur dlstime dlltime dspkts ddpkts dlspkt dldpkt dsbytes ddbytes pdspkts pddpkts pdsbytes pddbytes spktsz smeansz smaxsz sminsz dpktsz dmeansz dmaxsz dminsz sintdist dintdist sintdistact dintdistact sintdistidl dintdistidl suser duser label icmpid tcpopt tcpext stcpmax dtcpmax swin dwin jdelay ldelay bins binnum stcpb dtcpb tcprtt synack ackdat inode smaxsz sminsz dmaxsz dminsz