diff --git a/README.md b/README.md index d3086b0..e66864c 100644 --- a/README.md +++ b/README.md @@ -5,13 +5,13 @@ Analyze fail2ban logs to find most common ip's and plot histogram of access rate ## Example usage Plot the histogram of the access hits ``` -zcat /var/log/fail2ban.log* | ./fail2ban-analyze.py histogram +zcat -f /var/log/fail2ban.log* | ./fail2ban-analyze.py histogram ``` Rank IPs by bans, first 20 results ``` -zcat /var/log/fail2ban.log* | ./fail2ban-analyze.py rank 4 --only-bans --count 20 +zcat -f /var/log/fail2ban.log* | ./fail2ban-analyze.py rank 4 --only-bans --count 20 ``` Rank all IPs by bans, clobber by first 2 subnets ``` -zcat /var/log/fail2ban.log* | ./fail2ban-analyze.py rank 2 --only-bans --count 20 +zcat -f /var/log/fail2ban.log* | ./fail2ban-analyze.py rank 2 --only-bans --count 20 ```