A quick one, mostly a reference. It seems those .log files that are 87 bytes tend to be connections followed swiftly by disconnects.
ls -alFhL ~/kippo/log/tty | grep -v 87
Then we can skim through our list
python ~/kippo/utils/playlog.py ~/kippo/log/tty/20110124-x-x.log
What I would love for Kippo is some form of online tool to allow you to 'work through' an annotate the (wonderful) tty logs.