AIX ftp/sftp script monitor to failed logins

Hi All,

Any idea on how to write a script on AIX 5.3 to monitor ftp or sftp login failed.

Thanks and more power,
Itik

I would start by configuring syslog. In its logs should be the information you need.

thanks

i think i can also use the command "who /etc/security/failedlogin "...