From owner-freebsd-questions@FreeBSD.ORG  Wed Oct  5 15:20:01 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 8959316A420
	for <freebsd-questions@freebsd.org>;
	Wed,  5 Oct 2005 15:20:01 +0000 (GMT)
	(envelope-from micahjon@ywave.com)
Received: from smtpout1.ywave.com (ycomradius.yelmtel.com [216.227.100.60])
	by mx1.FreeBSD.org (Postfix) with SMTP id 017E843D46
	for <freebsd-questions@freebsd.org>;
	Wed,  5 Oct 2005 15:20:00 +0000 (GMT)
	(envelope-from micahjon@ywave.com)
Received: (qmail 6740 invoked by uid 502); 5 Oct 2005 15:19:59 -0000
Received: from dsl29164.ywave.com (HELO ?192.168.1.65?)
	(micahjon@ywave.com@216.227.116.164)
	by 0 with SMTP; 5 Oct 2005 15:19:59 -0000
X-CLIENT-IP: 216.227.116.164
X-CLIENT-HOST: dsl29164.ywave.com
Message-ID: <4343EF1F.6050001@ywave.com>
Date: Wed, 05 Oct 2005 08:19:59 -0700
From: Micah <micahjon@ywave.com>
User-Agent: Mozilla Thunderbird 1.0.7 (X11/20050930)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Leo Lapousterle <lapousterle@wanadoo.fr>
References: <73A6E215A2D954CDD1E12407@cc-110.int.t-online.fr>	<4343E077.8050406@ywave.com>
	<F8C5C174F8761F7F8AB06DD6@cc-110.int.t-online.fr>
In-Reply-To: <F8C5C174F8761F7F8AB06DD6@cc-110.int.t-online.fr>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: FreeBSD Questions <freebsd-questions@freebsd.org>
Subject: Re: Security logs
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 05 Oct 2005 15:20:01 -0000



Leo Lapousterle wrote:
> Micah,
> 
> 
>>Does /var/log/auth.log have what you need?
> 
> 
> Woa, I didn't know about that one :)
> Can we configure which service to log or not in there?
> 
> Thanks everyone for your solutions,

Check out syslog, specifically syslog.conf.  By default my auth.log 
shows failed/succesful SSH logins, console logins, and SU's.

HTH,
Micah