While I'm at it, you could grab "logwatch" and install it. It'll tell you, daily, who logged into your box via ssh (it does on mine, anyhow). Still not sure about "what command they run" other than viewing their .bash_history file. On Fri, 22 Aug 2003, Mike Burger wrote: > The first part is easy: Just take a look at /var/log/messages. > > The command is a little trickier, but, if the user has bash as their > shell, you can just read their ".bash_history" files from their home dirs. > > On Thu, 21 Aug 2003, n30 wrote: > > > Guys, > > > > Know of any ssh log tools? > > > > I want to know when someone logs into my ssh server and the command that > > they run....preferably real time... > > is that too much to ask :). > > > > Thanks in advance > > -N > > > > > > > > -- Mike Burger http://www.bubbanfriends.org Visit the Dog Pound II BBS telnet://dogpound2.citadel.org or http://dogpound2.citadel.org:2000 To be notified of updates to the web site, send a message to: site-update-request@xxxxxxxxxxxxxxxxx with a message of: subscribe -- Shrike-list mailing list Shrike-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/shrike-list