Syslog sshd

> Hi,

>

> could someone help me out.

>

> If a user connection is either successful or Failed

> it logs into the log file.

>

> Is there a way i can only capture failed logins in

> the log file.

>

>

> Regards

If it exists, the file /var/adm/loginlog will capture failed login attempt messages (this file does not exist by default). Administrators may also modify the SYSLOG_FAILED_LOGINS parameter in /etc/default/login to control how many login failures are allowed before log messages are generated梚f set to zero then all failed logins will be logged.

AYukiea at 2007-7-11 23:16:23 >