I've got my firewall on (the OS X firewall) and I've got a lot of attempts on screen sharing.
Allow AppleVNCServer connecting from 220.127.116.11:2223 uid = 0 proto=6
I want to log successful connections to make sure no one is making it through, similar to what is done with /var/log/secure.log
In fact, I'm surprised this isn't included with secure.log
What can I do?
For what its worth, I am running Mac OS X 10.5.8.
Daniel had a nice suggestion to use
netstat -a | grep vnc | grep ESTABLISHED
redirected to a file to log what is going on.
The problem is a connection is flagged as
ESTABLISHED as soon as the vnc login screen comes up regardless of whether or not a login is ultimately successful.
In other words, all those (hopefully) failed attempts that my firewall logs will look no different than my successful logins.