Compare commits

..

No commits in common. "60ba7ad89ca11e6d1d322c507d87a074c546d57b" and "89728fdcbe5d33918654068653749590d89288b3" have entirely different histories.

2 changed files with 1 additions and 20 deletions

View File

@ -1,17 +0,0 @@
# Fail2ban Analyze
Analyze fail2ban logs to find most common ip's and plot histogram of access rates.
## Example usage
Plot the histogram of the access hits
```
zcat /var/log/fail2ban.log* | ./fail2ban-analyze.py histogram
```
Rank IPs by bans, first 20 results
```
zcat /var/log/fail2ban.log* | ./fail2ban-analyze.py rank 4 --only-bans --count 20
```
Rank all IPs by bans, clobber by first 2 subnets
```
zcat /var/log/fail2ban.log* | ./fail2ban-analyze.py rank 2 --only-bans --count 20
```

View File

@ -75,9 +75,7 @@ else:
num_buckets = (max_date - min_date).total_seconds() / (bucket_size * 3600)
num_buckets = max(1, int(num_buckets))
counts, bin_edges = np.histogram(timestamps, bins=num_buckets)
ts_edges = [datetime.fromtimestamp(t) for t in bin_edges]
labels = [x[0].strftime('%Y-%m-%d %H:%M - ') + x[1].strftime('%Y-%m-%d %H:%M') for x in zip(ts_edges[:-1], ts_edges[1:])]
fig = tpl.figure()
fig.barh(counts, labels)
fig.hist(counts, bin_edges)
fig.show()