We are hoping to find something cross platform as we also have AIX hosts that could use this feature.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Michael Gale Sent: Wednesday, March 09, 2005 11:25 AM To: CLUG General Subject: Re: [clug-talk] logging users sessions Hello, I looked into this in the past ... the best option I found was to use a key logger. I suggest you look at vlogger ( I believe it is called). It is a kernel based key logger. It is easy to use ... just setup the config file and load the kernel module. Then all console access it recorded ... except it logs to a file with the name of the tty or pts device and not the user name. But I believe the user name was in the file. Michael. [EMAIL PROTECTED] wrote: > I'm looking for a means to log user sessions. Does anyone have any > experience with this? What software did you use to do it? > > user ssh's in > any command they type gets echoed to something like /var/log/...... > I don't want this to be optional > I want this to work with multiple shells (sh, bash, ksh, etc) > > thanks > sig > > > Found the following but have yet to look at them on more detail. > http://people.consol.de/~lausser/rootsh/rootsh.html > http://sudosh.sourceforge.net/ > http://www.egbok.com/sudoscript/ > http://foosh.sourceforge.net/ > http://e133.enemy.cx/xSH-paranoia/ > > > > _______________________________________________ > clug-talk mailing list > [email protected] > http://clug.ca/mailman/listinfo/clug-talk_clug.ca > Mailing List Guidelines (http://clug.ca/ml_guidelines.php) > **Please remove these lines when replying _______________________________________________ clug-talk mailing list [email protected] http://clug.ca/mailman/listinfo/clug-talk_clug.ca Mailing List Guidelines (http://clug.ca/ml_guidelines.php) **Please remove these lines when replying _______________________________________________ clug-talk mailing list [email protected] http://clug.ca/mailman/listinfo/clug-talk_clug.ca Mailing List Guidelines (http://clug.ca/ml_guidelines.php) **Please remove these lines when replying
