Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 15 Jan 2008 09:32:57 -0800 (PST)
From:      Tim Clewlow <tim1timau@yahoo.com>
To:        Richard Bates <bates@telehouse.com>, freebsd-current@freebsd.org
Subject:   Re: Question on security..
Message-ID:  <24594.73739.qm@web50306.mail.re2.yahoo.com>
In-Reply-To: <9419F125-F8F9-4FFB-A9F0-CF59DC9278C9@telehouse.com>

next in thread | previous in thread | raw e-mail | index | archive | help

--- Richard Bates <bates@telehouse.com> wrote:

> I know login failures are logged in /var/log/auth.log
> 
> is there a way to log the login of users in this log
> say something like
> 
> Jan 15 10:59:00 MyServer sshd[91869]: User bates authenticated from  
> 172.18.1.139
> Jan 15 10:59:00 MyServer sshd[91869]: User bates Disconnected from  
> 172.18.1.139
> 
> ================================
> === Richard Bates
> === TELEHOUSE America
> ================================
> 

Hello, login successes are also logged in /var/log/auth.log - if you just want
to see the successful ssh logins, then do:

# cat /var/log/auth.log | grep -e "ssh.*Accept"

If you want to see a list of currently logged in users, then do:

# who

Cheers, Tim.


      ____________________________________________________________________________________
Looking for last minute shopping deals?  
Find them fast with Yahoo! Search.  http://tools.search.yahoo.com/newsearch/category.php?category=shopping



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?24594.73739.qm>