HP-UX Host Intrusion Detection System Version 4.1 Administrator's Guide

Table A-20 Login/Logout Alert Properties (continued)
DescriptionAlert Value/FormatAlert Field TypeAlert FieldResponse
Program
Argument
Name or IP address of
the host from which
the user attempted to
log in.
<fully qualified host
name> <IP address>
StringAttackerargv[5]
Login name that the
user attempted to log
in as.
<username>
StringTargetargv[6]
Alert summaryStart of a successful login session
or end of a login session
StringSummaryargv[7]
Detailed alert
description
User <username> logged-in on
<pty> (REMOTE: <fully qualified
host name> <IP
address>)orUser <username>
logged-out from a session on
<pty>
StringDetailsargv[8]
The event that
triggered the alert.
Following are the possible values:
• Login
• Logout
StringEventargv[9]
Indicates a
login/logout alert
versus an su alert
1IntegerFlagargv[10]
Name of user that
logged in or logged
out
<username>
StringUserargv[11]
Name of pty device
associated with login
session
<pty device name>
StringDeviceargv[12]
182 Templates and Alerts