If you can upgrade to ULTRIX V4.0, there is an auditing subsystem provided there, which you could set up to just record login attempts (both successful and failed). It can record lots of other things, too... -Shawn Mamros mamros at aiag.enet.dec.com or mamros at cavdog.enet.dec.com