hi
you should use something like
swatch to monitor /var/log/messages for the string "control connection started], then call a custom script that grep some info from /var/log/radius/accounting.log
from the first you get the remote ip and date/time of connection
Example:
Aug 2 00:22:31 fileserver pptpd[2895]: CTRL: Client XX.XX.XX.XX control connection started
Aug 2 15:05:06 fileserver pptpd[1499]: CTRL: Client XX.XX.XX.XX control connection started
Aug 2 22:26:18 fileserver pptpd[7337]: CTRL: Client XX.XX.XX.XX control connection started
from the second you can recover many, many information..
if you find a way to do what you wish, please share here, thank you
Ciao
Stefano
swatch sh