hi all w, who, finger commands tell me who are all logged in _and_ alloted tty's. if a person uses ssh -T , or rsh, then i cannot find out on the fly without examining the logs. same goes for ftp too. If i want to watch the users logged in then , there really are few options to me ... closely examine the log files ( i put "*.* /dev/tty12" in my syslog.conf), checking the ps tree often but they dont help much. In short, i want the wtmp record to be written if there is logins in the below given categories. i think it might be to do with pam, but i really dont know much of pam usage, and i'm at a loss. So is there any single tool which tells the logins in the foll protocols.. 1> telnet / ssh logins with pty allocation as in normal who 2> ssh, rsh logins without pty allocation 3> ftp , preferably with the files being transferred 4> pop3 or is this too much to ask ? i dont mind if such a tool is su-only ,or requires priv mode. anything will do as long as i get the above ... regards omicron -- ****** omicron Mail:omicron@omicron.dyndns.org (Sridhar N) www:omicron.symonds.net pubkeys:omicron.symonds.net/pubkeys C O G I T O E R G O S U M ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~