On Sun, Jan 11, 2009 at 10:54:25 +0200, Dotan Cohen (dotanco...@gmail.com) 
wrote: 

> On a machine that I have root access to, how can I see who is logged
> into the machine? Specifically, I suspect that  a malicious entity is
> logging on in a compromised account over SSH, even while the account's
> user is sitting at the machine and logged in, so if I can catch two
> simultaneous login sessions (one on the physical hardware, one over
> ssh) then I can be sure. Thanks.

Just typing "w" (without the quotes) should be adequate.

-- 
Bob Cox.  Stoke Gifford, near Bristol, UK.
Please reply to the list only.  Do NOT send copies directly to me.
Debian on the NSLU2: http://bobcox.com/slug/


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to