Hello

Could someone tell me if there is a file that REDHAT stores log in information in. I was looking for a log that would record each time someone logged in or out and what time,data,etc that event occured on.

Also, what should I be looking for in other files if I suspect someone is messing around? What are the key log files to watch and what would I be looking for?

Is there a log file that records where a user logs in from? Like what IP address for instance?

Is there a log file that monitors IP connections? This would be like a connection from another computer but not neccesarily a user logging into a shell. For example, if my computer was pinged or samba was accessed, etc.

sure, /etc/wtmp, it can be accessed by the 'last' command

you ever used the last command?

/var/log/messages might give you some information also...