On Wed, 1 Oct 1997, Alex Bligh wrote:
If you keep all your servers time sync'd and keep full Radius accounting records, yes, you can translate an (IP address, time) pair into a username. Some ISPs can do this reliably. Many don't.
it's so easy. for dialup : I've got an authentication tool. Have You ever heard about Tacacs+ ? all informations are clear : when, which ip (which port on which router), username, result of authentication for leased : SYSLOG contains entries for sendmail.
Seconds may well matter. The next problem is to associate that user name with a person. Dead easy you may think. But the user may claim that someone else has been using their account.
most often company has one account and a few people had passwd to it. So... I can tell when it was. Then they should search inside their company.
Thus you also need to log CLI (calling number identity), which in turn means your telecom provider has to present it.
:( its impossible here. TPSA (telecommunication company ) is monopolist so they most often don't want to cooperate with people. even if u have an information which number was the source it's not everything. As i said - many companies use one PC to e-mail. When someone wants to check his mailbox simply call ( source phone is always the same ) and check it. MJ ___________________________________________________________________________ Miroslaw.Jaworski@ikp.com.pl (Psyborg) MJ102-RIPE ATM S.A. - IKP division WAN/UNIX adm