[Bro] Running racluster but with a time frame

[Monah Baki]

Hi all,


I need to run the following command "racluster -r
argus.2014.08.19.10.30.01.0.gz -s stime daddr -s stime saddr daddr
trans" but to display only events from 10:00am to 10:15am.


How can I accomplish this?



Thanks
Monah