Sorry, I also use 'metalog.
On Wed, 2005-12-21 at 12:45 +0000, Craig Webster wrote: > On 21 Dec 2005, at 12:32, Gavin Seddon wrote: > > I have been looking in '/var/log' for users logging on. The files and > > directories in there are fastidiously organised (to say the least). > > Better than usual UNIX distros. What is the best place to look for > > logins/hacks. > > Which syslog daemon do you use? How is it configured? > > I use metalog and I get password failure notices in /var/log/pwdfail/* > > You could also run > lastlog |grep -v '**Never logged in**' > to see when people last logged in. > > Yours, > Craig > -- > Craig Webster | t: +44 (0)131 516 8595 | e: [EMAIL PROTECTED] > Xeriom.NET | f: +44 (0)709 287 1902 | w: http://xeriom.net > > > -- Dr Gavin Seddon School of Pharmacy and Pharmaceutical Sciences University of Manchester Oxford Road, Manchester M13 9PL, U.K. -- gentoo-amd64@gentoo.org mailing list
