From owner-freebsd-security@FreeBSD.ORG Tue Jan 1 21:59:09 2008 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DC66716A417 for ; Tue, 1 Jan 2008 21:59:09 +0000 (UTC) (envelope-from kkutzko@teksavvy.com) Received: from ironport2-out.pppoe.ca (ironport2-out.pppoe.ca [206.248.154.182]) by mx1.freebsd.org (Postfix) with ESMTP id A763113C458 for ; Tue, 1 Jan 2008 21:59:09 +0000 (UTC) (envelope-from kkutzko@teksavvy.com) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Ao8CAC4/ekdMCqa7/2dsb2JhbACmOAQ X-IronPort-AV: E=Sophos;i="4.24,231,1196658000"; d="scan'208";a="12164537" Received: from mail.pppoe.ca ([65.39.192.132]) by ironport2-out.pppoe.ca with ESMTP; 01 Jan 2008 16:29:48 -0500 Received: from kevin ([76.10.166.187]) by mail.pppoe.ca (Internet Mail Server v1.0) with ASMTP id HWE05948; Tue, 01 Jan 2008 16:29:48 -0500 From: "Kevin K" To: "'Anjang Aki'" References: <477A9BBA.3030703@gmail.com> In-Reply-To: <477A9BBA.3030703@gmail.com> Date: Tue, 1 Jan 2008 16:29:44 -0500 Message-ID: <000301c84cbd$6d81c450$48854cf0$@com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 12.0 Thread-Index: AchMtKGnlM8IAndCR6qOYkpGeVNmvwACKzaQ Content-Language: en-us Cc: freebsd-security@freebsd.org Subject: RE: Tracking user's activity X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Jan 2008 21:59:09 -0000 You could also just run the watch command in a screen session or even daemonize it, if possible. -----Original Message----- From: owner-freebsd-security@freebsd.org [mailto:owner-freebsd-security@freebsd.org] On Behalf Of Frank Sent: Tuesday, January 01, 2008 3:00 PM To: Anjang Aki Cc: freebsd-security@freebsd.org Subject: Re: Tracking user's activity Anjang Aki wrote: > Greetings, > > I've been looking for a proper way to to track down user's activity > inside the shell as I'm helping my colleague to configure a web > hosting and shell hosting server. > > Someone have referred me to this article -- > http://bsdtips.utcorp.net/mediawiki/index.php/Snoop which is using > 'watch' commands to view user's activity once they logged in to the > server > > I found that this 'watch' utility is very useful and are able to > fulfill my needs but I can only be able to watch the activity once I'm > logging to the server at the time the users are logging in. > > Is there is any way that logging user's activity can be done without a > need for me to login at the server at the same time? Perhaps the > activity can be logged into a file and I can read it later. > > Or is there is any other utility I can use just to monitor user's > activity as the server is misused by a user previously and I don't > want it to happen again in the future. > > Best regards, > > > Hello! You can use "script filename" and start doing your stuff. The user can press CTRL-D when he's finished doing his stuff so the content can be flushed to the file. Happy new year, Frank _______________________________________________ freebsd-security@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org" __________ NOD32 2759 (20080101) Information __________ This message was checked by NOD32 antivirus system. http://www.eset.com