About your question, the wtmp file is changed by the login/logout process. I think that the login program in Debian is quite similar to that in Slackware. You can try to configure the HostSentry in Debian like in Slackwere.
( Sorry for my English ) -- yoros
pgpXlAt5TZj6s.pgp
Description: PGP signature