From owner-freebsd-questions  Tue Dec 29 12:02:55 1998
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id MAA04857
          for freebsd-questions-outgoing; Tue, 29 Dec 1998 12:02:55 -0800 (PST)
          (envelope-from owner-freebsd-questions@FreeBSD.ORG)
Received: from peanut.readington.com (peanut.readington.com [207.207.198.8])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id MAA04850
          for <questions@FreeBSD.ORG>; Tue, 29 Dec 1998 12:02:53 -0800 (PST)
          (envelope-from chrismar@peanut.readington.com)
Received: from localhost (chrismar@localhost)
	by peanut.readington.com (8.9.1/8.8.8) with SMTP id PAA10955
	for <questions@FreeBSD.ORG>; Tue, 29 Dec 1998 15:01:08 -0500 (EST)
	(envelope-from chrismar@peanut.readington.com)
Date: Tue, 29 Dec 1998 15:01:08 -0500 (EST)
From: Chris Martino <chrismar@peanut.readington.com>
To: questions@FreeBSD.ORG
Subject: Re: tracking users (telnet/FTP)
In-Reply-To: <Pine.GSO.4.02A.9812291340280.18472-100000@uw>
Message-ID: <Pine.BSF.3.96.981229150006.10929B-100000@peanut.readington.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

You can use   'lastcomm <username>'

I believe this needs something special in the kernel also.

Chris

On Tue, 29 Dec 1998, Jerry Raynor wrote:

> tail the logs??
> 
> I know all about last, who, the logs etc.. I was wonder if there was a
> way you can actaully track the user through the system, the command they
> issue, recreate the connection etc.. (hours later if need be) I obviously
> can't be up 24hrs a day! :)  and if I could my gf would be pissed, sleep
> is the only reason I come away from the machine.
> 
> Thanks!
> 
> 
> On Tue, 29 Dec 1998, Paul wrote:
> 
> > You could "tail" the logs.....
> > 
> > At 08:28 PM 12/28/98 +0000, Robert wrote:
> > >Try the "last" command.
> > >
> > >Also, logs are in /var/log/
> > >
> > >-rob
> > >( www.namodn.com )
> > >( robert@namodn.com )
> > >
> > >On Mon, 28 Dec 1998, Jerry Raynor wrote:
> > >
> > >> How can you or where can I get info on track users who telnet or FTP in.
> > >> Commands etc...
> > >> 
> > >> Thanks
> > 
> > Best regards,
> > Paul Jacobs
> > Commerce Service Provider (CSP)
> > Internet Presence Provider (IPP)
> > http://www.netpacq.com
> > mailto:paul@netpacq.com
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message