From owner-freebsd-current@FreeBSD.ORG  Tue Jan 15 16:00:27 2008
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 523F916A417
	for <freebsd-current@freebsd.org>; Tue, 15 Jan 2008 16:00:27 +0000 (UTC)
	(envelope-from bates@telehouse.com)
Received: from mail.telehouse.com (mail.telehouse.com [209.137.140.6])
	by mx1.freebsd.org (Postfix) with ESMTP id 248CF13C442
	for <freebsd-current@freebsd.org>; Tue, 15 Jan 2008 16:00:27 +0000 (UTC)
	(envelope-from bates@telehouse.com)
Received: from [172.18.1.139] (BatesiBook.telehouse.com [172.18.1.139])
	(using TLSv1 with cipher AES128-SHA (128/128 bits))
	(No client certificate requested)
	by mail.telehouse.com (Postfix) with ESMTP id BC5A4880BE
	for <freebsd-current@freebsd.org>; Tue, 15 Jan 2008 11:00:25 -0500 (EST)
Mime-Version: 1.0 (Apple Message framework v753)
To: freebsd-current@freebsd.org
Message-Id: <9419F125-F8F9-4FFB-A9F0-CF59DC9278C9@telehouse.com>
From: Richard Bates <bates@telehouse.com>
Date: Tue, 15 Jan 2008 11:00:24 -0500
X-Mailer: Apple Mail (2.753)
Content-Type: text/plain;
	charset=US-ASCII;
	delsp=yes;
	format=flowed
Content-Transfer-Encoding: 7bit
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Subject: Question on security..
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>, 
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Jan 2008 16:00:27 -0000

I know login failures are logged in /var/log/auth.log

is there a way to log the login of users in this log
say something like

Jan 15 10:59:00 MyServer sshd[91869]: User bates authenticated from  
172.18.1.139
Jan 15 10:59:00 MyServer sshd[91869]: User bates Disconnected from  
172.18.1.139

================================
=== Richard Bates
=== TELEHOUSE America
================================