From owner-freebsd-hackers@FreeBSD.ORG Wed Oct 29 01:06:40 2003 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8D32B16A4CE for ; Wed, 29 Oct 2003 01:06:40 -0800 (PST) Received: from srv1.cosmo-project.de (srv1.cosmo-project.de [213.83.6.106]) by mx1.FreeBSD.org (Postfix) with ESMTP id C8C1143F3F for ; Wed, 29 Oct 2003 01:06:38 -0800 (PST) (envelope-from andreas@klemm.apsfilter.org) Received: from srv1.cosmo-project.de (localhost [IPv6:::1]) h9T96at2021995 (version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO) for ; Wed, 29 Oct 2003 10:06:37 +0100 (CET) (envelope-from andreas@klemm.apsfilter.org) Received: (from uucp@localhost)h9T96afS021994 for freebsd-hackers@freebsd.org; Wed, 29 Oct 2003 10:06:36 +0100 (CET) (envelope-from andreas@klemm.apsfilter.org) Received: from titan.klemm.apsfilter.org (localhost.klemm.apsfilter.org [127.0.0.1]) by klemm.apsfilter.org (8.12.10/8.12.9) with ESMTP id h9T91GZw001274 for ; Wed, 29 Oct 2003 10:01:23 +0100 (CET) (envelope-from andreas@titan.klemm.apsfilter.org) Received: (from andreas@localhost)h9T91GU3001273 for freebsd-hackers@freebsd.org; Wed, 29 Oct 2003 10:01:16 +0100 (CET) (envelope-from andreas) Date: Wed, 29 Oct 2003 10:01:16 +0100 From: Andreas Klemm To: freebsd-hackers@freebsd.org Message-ID: <20031029090116.GA960@titan.klemm.apsfilter.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline X-Operating-System: FreeBSD 5.1-CURRENT X-Disclaimer: A free society is one where it is safe to be unpopular User-Agent: Mutt/1.5.4i Subject: how to monitor remote users shell activities best ? watch / snp / ... X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Oct 2003 09:06:40 -0000 Is there a freebsd tool that shows you in realtime, which users are logged in from remote using which pty port ? So to say something like while true do clear; w; sleep 10 done Preferable as X11 application. Cool would be options like: - log the snooped data - show their running processes - click to pty to fire up xterm with "watch -X " to snoop their current traffic. Background, I help an open source project and now somebody is on my local machine, to troubleshoot something, and I only know this person since a day ... so to say not well. Then the snp option came to my mind and the question, if perhaps somebody had done such a monitor for similar purposes. Remote vendor access and such things come to my mind. Of course I would ask him if its o.k. for him, that I can snoop his terminal traffic, better to play with open cards. Andreas /// -- Andreas Klemm - Powered by FreeBSD 5.1-CURRENT Need a magic printfilter today ? -> http://www.apsfilter.org/