readme update + make that filter by hash thing real

1 files changed, 7 insertions, 7 deletions

diff --git a/README.md b/README.md
index cd12b27..76c0d22 100644
--- a/README.md
+++ b/README.md
@@ -13,14 +13,14 @@ Options:
 -v, --verbose         Make the output more verbose (print abridged logs for all logins where commands are run, not just the interesting ones)
 -vv, --verboser       Make the output even more verbose (print timestamp, event id, and message (if applicable) for all events)
 -vvv, --verbosest     Make the output even more verboserer (just group the input log by session id and dump it to pretty-printed JSON)
--B, --blank           Print nothing whatsoever. Override this with other arguments to filter for only the stuff you care about
--P, --pings           | With blank mode active, print "empty pings"
--F, --fails           | With blank mode active, print failed logins
--L, --logins          | With blank mode active, print "login pings"
--C, --commands        | With blank mode active, print "command pings"
--S, --sessions        * With blank mode active, print the cool interesting sessions that aren't any of that other stuff.
+-P, --pings           Print only "empty pings"
+-F, --fails           Print only failed logins
+-L, --logins          Print only "login pings"
+-C, --commands        Print only "command pings"
+-S, --sessions        Print only the cool interesting sessions that aren't any of that other stuff.
+-r, --redact-ip       Redact IP addresses by converting them to 16-character hashes
 -i, --filter-ip FILTER_IP
-                      Filter data to a specific IP
+                      Filter data to a specific IP or censored hash thereof
 ```
 
 # Terminology