From owner-freebsd-questions  Tue Dec 29 10:50:30 1998
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id KAA29250
          for freebsd-questions-outgoing; Tue, 29 Dec 1998 10:50:30 -0800 (PST)
          (envelope-from owner-freebsd-questions@FreeBSD.ORG)
Received: from uz.ComCAT.COM (uz.ComCAT.COM [204.170.64.8])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id KAA29245
          for <questions@FreeBSD.ORG>; Tue, 29 Dec 1998 10:50:27 -0800 (PST)
          (envelope-from jerryr@ComCAT.COM)
Received: from uw.ComCAT.COM (uw [204.170.64.249]) by uz.ComCAT.COM (8.8.8/8.8.8/sol2/mh/19980701)
	with ESMTP; id NAA09352; Tue, 29 Dec 1998 13:46:46 -0500 (EST)
Received: from localhost by uw.ComCAT.COM (8.9.1a/8.9.1/sol2/clnt/19981012) with SMTP id NAA18965
	for <questions@FreeBSD.ORG>; Tue, 29 Dec 1998 13:46:42 -0500 (EST)
X-Authentication-Warning: uw.ComCAT.COM: jerryr owned process doing -bs
Date: Tue, 29 Dec 1998 13:46:42 -0500 (EST)
From: Jerry Raynor <jerryr@ComCAT.COM>
X-Sender: jerryr@uw
To: questions@FreeBSD.ORG
Subject: Re: tracking users (telnet/FTP)
In-Reply-To: <4.1.19981229100800.00a6e100@mail.netpacq.com>
Message-ID: <Pine.GSO.4.02A.9812291340280.18472-100000@uw>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

tail the logs??

I know all about last, who, the logs etc.. I was wonder if there was a
way you can actaully track the user through the system, the command they
issue, recreate the connection etc.. (hours later if need be) I obviously
can't be up 24hrs a day! :)  and if I could my gf would be pissed, sleep
is the only reason I come away from the machine.

Thanks!


On Tue, 29 Dec 1998, Paul wrote:

> You could "tail" the logs.....
> 
> At 08:28 PM 12/28/98 +0000, Robert wrote:
> >Try the "last" command.
> >
> >Also, logs are in /var/log/
> >
> >-rob
> >( www.namodn.com )
> >( robert@namodn.com )
> >
> >On Mon, 28 Dec 1998, Jerry Raynor wrote:
> >
> >> How can you or where can I get info on track users who telnet or FTP in.
> >> Commands etc...
> >> 
> >> Thanks
> 
> Best regards,
> Paul Jacobs
> Commerce Service Provider (CSP)
> Internet Presence Provider (IPP)
> http://www.netpacq.com
> mailto:paul@netpacq.com
> 
> 
> 
> 
> 
> 
> 
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message