From owner-freebsd-questions  Wed Nov 12 13:52:58 1997
Return-Path: <owner-freebsd-questions>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.7/8.8.7) id NAA12565
          for questions-outgoing; Wed, 12 Nov 1997 13:52:58 -0800 (PST)
          (envelope-from owner-freebsd-questions)
Received: from cai.com (usildaca.cai.com [141.202.248.3])
          by hub.freebsd.org (8.8.7/8.8.7) with SMTP id NAA12544
          for <questions@freebsd.org>; Wed, 12 Nov 1997 13:52:49 -0800 (PST)
          (envelope-from Fiowi01@mail.cai.com)
Received: from mail.cai.com by cai.com (16.7/3.1.090690)
	id AA25463; Wed, 12 Nov 97 16:49:59 -0500
Received: by mail.cai.com with Internet Mail Service (5.0.1458.49)
	id <WX635JGJ>; Wed, 12 Nov 1997 16:54:01 -0500
Message-Id: <314E26C1801AD1119C3000805FD40926128D76@usilms05.cai.com>
From: "Fiore, William" <Fiowi01@mail.cai.com>
To: questions@freebsd.org
Cc: support@cdrom.com
Subject: where are attempted logins logged
Date: Wed, 12 Nov 1997 16:55:41 -0500
X-Priority: 3
Mime-Version: 1.0
X-Mailer: Internet Mail Service (5.0.1458.49)
Content-Type: text/plain
Sender: owner-freebsd-questions@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

I sort of remember it was /var/log/messages or some such.

could someone refresh my memory?

tia $bilfjr