hardest week yet: some guidence please

[ichabod801]

For step 2, you should be checking in line, not in auth_log. Once you have that fixed, do you see a pattern in the output from step 2? If so, you use that pattern in step 3.