Can I view failed login attempts with dstrace?
If so, what switches would I use?