If I remember correctly, at least for root, logins are logged to LOG_AUTH at level LOG_NOTICE and multiple failures are logged at level LOG_CRIT. Not sure if it is the same for common users. If it bothers u for many days, why not get the source codes for login/passwd and read them?
【在 p****k 的大作中提到】 : If I remember correctly, at least for root, logins are logged : to LOG_AUTH at level LOG_NOTICE and multiple failures are logged : at level LOG_CRIT. Not sure if it is the same for common users. : If it bothers u for many days, why not get the source codes for : login/passwd and read them?
p*k
5 楼
well, if have root priviledge, just play with /etc/syslog.conf, try log each level to a different file, check which file the multiple login failures warning goes to ...