reading my syatem's connection log, I got these: ------------------------------------------------------------------ costi ttya0 Fri May 5 18:41 - 18:42 (00:01) costi ttya0 Fri May 5 18:39 - 18:41 (00:01) costi pts/0 costi.altex.ro Fri May 5 18:39 - 18:42 (00:02) ------------------------------------------------------------------ the first 2 lines look like costi logged in at some ttya0 console now there are only 6 tty consoles defined on the system and they are not available for costi so I wonder how did he do that ? Claudiu -- To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe" as the Subject.