Forgive my ignorance here. I don't know squat about databases. Thanks to everyone for the answers and suggestions. Barry, I'll check out pam_shield today. <div class="gmail_quote">On Jan 25, 2016 1:29 AM, <<a href="mailto:lists@brimer.org">lists@brimer.org</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> On Sat, 23 Jan 2016, Phil Beckley wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> 1. Why is tallylog a binary file? I would love to parse it like a log, but that seems like a difficult task. </blockquote> Thorsten has already answered why this is a binary file. It seems that you are trying to come up with a way to log failed login attempts. I have an idea for you that is somewhat unconventional: Use pam_shield <<a href="http://www.heiho.net/pam_shield/" rel="noreferrer" target="_blank">http://www.heiho.net/pam_shield/</a>> and instead of having it create iptables rules, have it echo a message to logger on a localx facility .. which will effectively allow you to have a log created of people failing to log in to your systems. You don't have to use logger or use syslog even .. rather you could run whatever command is interesting to you/meets your needs. Hope this helps, Barry _______________________________________________ Pam-list mailing list <a href="mailto:Pam-list@redhat.com" target="_blank">Pam-list@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/pam-list" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/pam-list</a> </blockquote></div>