[tlug] Login/SSH Scan Detection

["A.Sajjad Zaidi" <sajjad@example.com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

Ive been thinking of a way to detect whenever there is a login attempt
and send an email notification if there is.

It should send the alert as soon as possible so log file checkers that
run very often (every minute or so) might be overkill.

Has anyone done this or knows a simple way to do it? I can get syslog
to write to a FIFO, but dont know how to do anything useful with it.

- -- 
A. Sajjad Zaidi
System Administrator
Technology & Operations Div.
Digital Garage Inc.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8cJVat1KjqyZ+DQ4RAjsxAJ9cP3xMPw42XlwvIVtlfegwG01YHQCeKEv2
JC4XQ4CeCrwMuADPL7nMSGA=
=2feQ
-----END PGP SIGNATURE-----