add options to grab the last N bytes of active files and define the time
in which a file is considered active (defaults to 1 hour)