From owner-freebsd-questions  Tue May  6 00:19:36 1997
Return-Path: <owner-questions>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id AAA21584
          for questions-outgoing; Tue, 6 May 1997 00:19:36 -0700 (PDT)
Received: from narcissus.ml.org (root@brosenga.Pitzer.edu [134.173.120.201])
          by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id AAA21572
          for <freebsd-questions@FreeBSD.ORG>; Tue, 6 May 1997 00:19:34 -0700 (PDT)
Received: from localhost (ben@localhost) by narcissus.ml.org (8.8.5/8.7.3) with SMTP id AAA06699; Tue, 6 May 1997 00:19:23 -0700 (PDT)
Date: Tue, 6 May 1997 00:19:23 -0700 (PDT)
From: Snob Art Genre <ben@narcissus.ml.org>
To: Kevin Eliuk <kevin_eliuk@sunshine.net>
cc: "Adam L. Simpson" <adam@netsonic.com>, freebsd-questions@FreeBSD.ORG
Subject: Re: monitoring users
In-Reply-To: <Pine.BSF.3.95q.970505230602.179B-100000@kevin.sunshine.net>
Message-ID: <Pine.NEB.3.96.970506001646.6659A-100000@narcissus.ml.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-questions@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

On Mon, 5 May 1997, Kevin Eliuk wrote:

> On Tue, 6 May 1997, Adam L. Simpson wrote:
> 
> >Maybe this is a dumb question, but is there a way to watch exactly what a
> >user whois connected to your system and see exactly what they are doing?
> >
> >
> >
> 
> $ w <RETURN>
> 

lsof is also useful, especially combined with netstat -a.  Or if you
really want to get intrusive, man watch(8). 


 Ben

"You have your mind on computers, it seems."