About that failed login data

I forgot to mention: if you are sending me data, please try to capture the
facility and priority at which your system records the failed login events.
This is not always a trivial activity, so don't waste a lot of time on it,
but if you can get at it, it will be given a very good home :-)

thanks -- tbird