VMS Help SHOW, INTRUSION, Qualifiers  *Conan The Librarian (sorry for the slow response - running on an old VAX)

1 - /NODE

       /NODE[=(node-name[,...])]

    The /NODE qualifier displays each intrusion record with the
    supporting node information.

    If you specify individual nodes, the supporting node information
    is displayed only for the nodes listed.

2 - /OLD

    On VAX, displays the contents of the old kernel mode intrusion
    database. The kernel mode intrusion database was used by the
    system and layered products prior to OpenVMS VAX Version 6.1. It
    is still updated by the system to provide backwards compatability
    to applications that have not yet converted over to using the
    supported system services for access to the intrusion database.
    Entries added directly to the old kernel mode intrusion database
    by applications may be examined only by using the /OLD qualifier.

3 - /OUTPUT

       /OUTPUT[=filespec]

    Directs the output from the SHOW INTRUSION command to the file
    specified with the qualifier. By default, output from the command
    is displayed to SYS$OUTPUT.

4 - /TYPE

       /TYPE=keyword

    Selects the type of information from the intrusion database that
    is displayed. The valid keywords are as follows:

    ALL        All entries. By default, all entries are displayed.

    SUSPECT    Entries for login failures that have occurred but have
               not yet passed the threshold necessary to be identified
               as intruders.

    INTRUDER   Entries for which the login failure rate was high
               enough to warrant evasive action.