Fields argument's comma-seperated list does not accept spaces

[skepppy]

When using rdump to only dump certain fields using the -F flag, the help messages states:

-F FIELDS, --fields FIELDS
Fields (comma seperated) to output in dumping (default: None)

Providing the list field_a, field_b, field_c does not yield the expected result, as only field_a is correctly parsed, but the other fields are not. This is maybe because the splitted elements are not stripped from spaces, resulting in the field field_b (with a space prepended to it), which is a field name that does not exist, resulting in rdump not finding the field.

Would it be good to strip the parsed fields from spaces or provide a text that explicitly mentions this in the help message of the relevant arguments?

[Schamper]

Did you provide the argument wrapped in quotes? rdump -F "field_a, field_b"? If you don't do that, it won't arrive correctly as an argument for -F at all. It probably still won't work as we don't strip fields after splitting on comma, but just trying to understand your question correctly:

flow.record/flow/record/tools/rdump.py

Line 325 in e9118cf

fields = args.fields.split(",") if args.fields else []

[skepppy]

Yeah, I wrapped it in quotes, so it takes with the spaces, like this:

cat walkfs.record.gz | rdump -F "hostname, atime, mtime, ctime"

[yunzheng]

We should indeed strip spaces