[clug-talk] logging users sessions

smagnuson at forzani.com smagnuson at forzani.com
Thu Mar 10 13:12:40 PST 2005


We are hoping to find something cross platform as we also have AIX hosts that could use this feature.



-----Original Message-----
From: clug-talk-bounces at clug.ca [mailto:clug-talk-bounces at clug.ca]On
Behalf Of Michael Gale
Sent: Wednesday, March 09, 2005 11:25 AM
To: CLUG General
Subject: Re: [clug-talk] logging users sessions



Hello,

I looked into this in the past ... the best option I found was to use a 
key logger. I suggest you look at vlogger ( I believe it is called). It 
is a kernel based key logger.

It is easy to use ... just setup the config file and load the kernel 
module. Then all console access it recorded ... except it logs to a file 
  with the name of the tty or pts device and not the user name. But I 
believe the user name was in the file.


Michael.



smagnuson at forzani.com wrote:
> I'm looking for a means to log user sessions.  Does anyone have any experience with this?  What software did you use to do it?
> 
> user ssh's in
> any command they type gets echoed to something like /var/log/......
> I don't want this to be optional
> I want this to work with multiple shells (sh, bash, ksh, etc)
> 
> thanks
> sig
> 
> 
> Found the following but have yet to look at them on more detail.
> http://people.consol.de/~lausser/rootsh/rootsh.html
> http://sudosh.sourceforge.net/
> http://www.egbok.com/sudoscript/
> http://foosh.sourceforge.net/
> http://e133.enemy.cx/xSH-paranoia/
> 
> 
> 
> _______________________________________________
> clug-talk mailing list
> clug-talk at clug.ca
> http://clug.ca/mailman/listinfo/clug-talk_clug.ca
> Mailing List Guidelines (http://clug.ca/ml_guidelines.php)
> **Please remove these lines when replying

_______________________________________________
clug-talk mailing list
clug-talk at clug.ca
http://clug.ca/mailman/listinfo/clug-talk_clug.ca
Mailing List Guidelines (http://clug.ca/ml_guidelines.php)
**Please remove these lines when replying



More information about the clug-talk mailing list