I have following warning in /var/adm/messages:
Feb 12 19:34:44 hostname login: REPEATED LOGIN FAILURES ON /dev/pts/6
FROM user.intranet_address
How am i able to examine which user he wanted to login and what kind of
login it was (ftp, telnet, rlogin, ....)??
Kind regards
R. Schicht