From f9b2e6c3a550256b62c156d948f2bfdd288e482f Mon Sep 17 00:00:00 2001 From: Ada Isopods Date: Fri, 16 May 2025 03:24:45 -0600 Subject: readme update + make that filter by hash thing real --- README.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) (limited to 'README.md') diff --git a/README.md b/README.md index cd12b27..76c0d22 100644 --- a/README.md +++ b/README.md @@ -13,14 +13,14 @@ Options: -v, --verbose Make the output more verbose (print abridged logs for all logins where commands are run, not just the interesting ones) -vv, --verboser Make the output even more verbose (print timestamp, event id, and message (if applicable) for all events) -vvv, --verbosest Make the output even more verboserer (just group the input log by session id and dump it to pretty-printed JSON) --B, --blank Print nothing whatsoever. Override this with other arguments to filter for only the stuff you care about --P, --pings | With blank mode active, print "empty pings" --F, --fails | With blank mode active, print failed logins --L, --logins | With blank mode active, print "login pings" --C, --commands | With blank mode active, print "command pings" --S, --sessions * With blank mode active, print the cool interesting sessions that aren't any of that other stuff. +-P, --pings Print only "empty pings" +-F, --fails Print only failed logins +-L, --logins Print only "login pings" +-C, --commands Print only "command pings" +-S, --sessions Print only the cool interesting sessions that aren't any of that other stuff. +-r, --redact-ip Redact IP addresses by converting them to 16-character hashes -i, --filter-ip FILTER_IP - Filter data to a specific IP + Filter data to a specific IP or censored hash thereof ``` # Terminology -- cgit v1.2.3