---
name: "ralabel"
section: "1"
platform: "linux"
package: "argus-client"
version: "1:5.0.2+git20250321.41f65e2-2"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/ralabel"
---

# ralabel(1)

inserts fixed form or free form metadata labels into argus(8). ralabel supports a number of strategies for labeling including 1) address based, providing free form metadata, country code, geo data and fully qualified domain name (FQDN) labeling; 2)port based, providing free form labels using IANA port definitions, and 3) flow filter, providing free form labels based on argus filter specicfications.

## NAME

**ralabel** - inserts fixed form or free form metadata labels into **[argus(8)](/argus/8.md)**. **ralabel** supports a number of strategies for labeling including 1) address based, providing free form metadata, country code, geo data and fully qualified domain name (FQDN) labeling; 2)port based, providing free form labels using IANA port definitions, and 3) flow filter, providing free form labels based on argus filter specicfications.

## SYNOPSIS

**ralabel** **-f** *address.file* \[-M **addr**\] \[-m **mask**\] \[**raoptions**\] \[**--** *filter-expression*\]

## DESCRIPTION

**Ralabel** reads **argus** data from an *argus-data* source, and selects records that include IP addresses specified by the **address.spec** file.  This program provides high performance address matching for any number of addresses.

## RALABEL ADDRESS SPECIFICATION

Ralabel, reads a number of standard IANA IP address file formats that specific IPv4 addresses, CIDR addresses and IPV4 prefix address specification. Examples of these file types are provided in ./support/Config.

## OPTIONS

- **-f** *label.strategy.specification.file*

  Provide a label specification file.

- **-M** *addr*

  If the label specification is a simple address list, specify this option.

- **-m** *saddr, daddr*

  For IANA address labeling, specify which address should be labeled (default saddr and daddr).

## INVOCATION

This invocation reads **[argus(8)](/argus/8.md)** data from **argusfile** and labels records that match any options in the **ralabel.conf** file.

```
   ralabel -r argusfile -f ralabel.conf - ip
```

## COPYRIGHT

Copyright (c) 2000-2024 QoSient. All rights reserved.

## SEE ALSO

**ralabel.conf.5,** **[ra(1)](/ra/1.md),** **[rarc(5)](/rarc/5.md),** **[argus(8)](/argus/8.md),**

## AUTHORS

```
Carter Bullard (carter@qosient.com).
```