Unix: Looking for evil in your firewall logs