This morning I noticed the following entry reported by last.
LOGIN     dtremote                      Thu Mar 07 13:51 - 14:25  (00:33)
I have never seen this before and there is no username LOGIN.
Is this possibly an attempt to connect via XDMCP?
Bruce.
----------------------------------------------------------------------
  Bruce J. Senn                               Phone:  (518) 388-6664
  Senior System Manager                       FAX:    (518) 388-6458
  Union College                             E-mail:  sennb_at_union.edu
  Schenectady, NY 12308           WWW:  
http://www1.union.edu/~sennb
----------------------------------------------------------------------
Received on Fri Mar 08 2002 - 14:20:08 NZDT