Thanks to:
Lavelle, Bryan [Bryan.Lavelle_at_COMPAQ.com]
jay nash [mgn321_at_yahoo.com]
Fletcher, Joe [joe.fletcher_at_Metapack.com]
The consensus is that this is an attempt to login via CDE or other X interface.
My theory is that the are failed connection attempt (probably by me from our VPN server) where the host cannot get back to the remote machine, but this is still just a theory.  I may try to reproduce the problem.  There was noting in /usr/var/dt/Xerrors related to these events.
Thanks.
Bruce.
> -----Original Message-----
> 
> This morning I noticed the following entry reported by last.
> 
> LOGIN     dtremote          Thu Mar 07 13:51 - 14:25  (00:33)
> 
> I have never seen this before and there is no username LOGIN.
> 
> Is this possibly an attempt to connect via XDMCP?
----------------------------------------------------------------------
  Bruce J. Senn                               Phone:  (518) 388-6664
  Senior System Manager                       FAX:    (518) 388-6458
  Union College                             E-mail:  sennb_at_union.edu
  Schenectady, NY 12308           WWW:  
http://www1.union.edu/~sennb
----------------------------------------------------------------------
> 
> 
Received on Mon Mar 11 2002 - 14:58:18 NZDT