Pick up all messages* files less than two days old rather than

just messages{,.0*} when looking for login failures and refused
connections.

PR: 23415
Mostly submitted by: phk

Convert a few "  "s to tabs while I'm here - for consistency.

etc/security

@@ -40,19 +40,20 @@ separator () {
 }
 
 catmsgs() {
-  [ -f $LOG/messages.0.gz ] && zcat $LOG/messages.0.gz
-  [ -f $LOG/messages.0 ] && cat $LOG/messages.0
-  [ -f $LOG/messages ] && cat $LOG/messages
+	find $LOG -name 'messages.*' -mtime -2 |
+	    sort -t. -r -n +1 -2 |
+	    xargs zcat -f
+	[ -f $LOG/messages ] && cat $LOG/messages
 }
 
 sflag=FALSE ignore=
 while getopts ams c
 do
-  case "$c" in
-    a) ignore="$ignore|^amd:";;
-    m) ignore="$ignore|^mfs:";;
-    s) sflag=TRUE;;
-  esac
+	case "$c" in
+		a) ignore="$ignore|^amd:";;
+		m) ignore="$ignore|^mfs:";;
+		s) sflag=TRUE;;
+	esac
 done
 
 yesterday=`date -v-1d "+%b %e "`