#!/bin/sh # # authwarning.sh # # PURPOSE: Skims authlog (syslogd output file) # for "fishy stuff." # # AUTHOR: chux0r.org # DATE: Feb 21, 2000 # cd /var/adm/syslog TMPVAR=`date | cut -c 5-10` grep "$TMPVAR" authlog |grep '[Ff]ailed' grep "$TMPVAR" authlog |grep '[Ee]rror' grep "$TMPVAR" authlog |grep '[Ii]llegal' grep "$TMPVAR" authlog |grep '[Ff]atal' grep "$TMPVAR" authlog |grep '[Nn]ot [Aa]llowed' grep "$TMPVAR" authlog |grep "BAD SU" grep "$TMPVAR" authlog |grep TSM grep "$TMPVAR" authlog |grep '[Dd][Ee][Nn][Ii][Ee][Dd]'