mysql logs shows that information is stored in the db on the basis of IP.....:-( which sucks. mysql> select * from logs; | 172.16.2.4 <http://172.16.2.4> | auth | crit | crit | 22 | 2005-11-02 | 22:30:27 | su | su: [ID 810491 auth.crit] 'su root' failed for atifmun on /dev/pts/1 | 13115 | +-------------+----------+----------+---------+------+------------+----------+-------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------+ 13115 rows in set (0.11 sec) Please help....thanks in advance. atif