keeping track of who is logging in

[Erik Freed]

I just experienced a strange thing while watching our process table
via the useful `scan' program (this uses cursors to perform a
automatically updated ps command) There was apparently someone
trying repeatedly to log into our system. I felt helpless because I
couldn't tell who it was. Is there some way to monitor the data flow
on the tty line? (in software) the ps showed alternate getty and
login processes over and over again. Has someone out there solved this
problem? thanks in advance...
-- 
-------------------------------------------------------------------------------
                           Erik James Freed
			   Aurora Systems
			   San Francisco, CA
			   {dual,ptsfa}!aum!freed