logcheck runs periodically and checks the system logs for unusual and alerting events. These are reported to the administrator by email. The logcheck package is suggested by portsentry. Please look at http://www.psionic.com/abacus/logcheck for more information. I have also a beta version of the logcheck package running at my servers. PS: I have a written statement from the author that distribution with Debian is permitted. Rene