From owner-freebsd-security  Mon Jan 22 10:32:57 1996
Return-Path: owner-security
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.3/8.7.3) id KAA04029
          for security-outgoing; Mon, 22 Jan 1996 10:32:57 -0800 (PST)
Received: from cyber1.cyberhall.com (cyber1.cyberhall.com [206.41.142.3])
          by freefall.freebsd.org (8.7.3/8.7.3) with SMTP id KAA04017
          for <freebsd-security@freebsd.org>; Mon, 22 Jan 1996 10:32:51 -0800 (PST)
Received: (from dbrockus@localhost) by cyber1.cyberhall.com (8.6.11/8.6.9) id MAA00698; Mon, 22 Jan 1996 12:32:17 GMT
Date: Mon, 22 Jan 1996 12:32:17 +0000 ()
From: David Brockus <dbrockus@cyberhall.com>
To: freebsd-security@freebsd.org
Subject: Logging user activity
Message-ID: <Pine.BSF.3.91.960122122451.602C-100000@cyber1.cyberhall.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-security@freebsd.org
Precedence: bulk

I am running FreeBSD 2.0.5R system.  I believe there is a "hacked" 
account on the system I maintain.  I would to extensively monitor this 
users activity.  I want to log everything.  Any there any suggestion on 
how to set this up or can anybody recommend any packages to do this?
Thanks in advance.


	   					David Brockus