While .bash_history would work if the user was using bash or they didn't know enough to delete it, I prefer process accounting (see psacct) Tom On Sat, 23 Aug 2003, Mike Burger wrote: > While I'm at it, you could grab "logwatch" and install it. It'll tell > you, daily, who logged into your box via ssh (it does on mine, anyhow). > > Still not sure about "what command they run" other than viewing their > .bash_history file. > > On Fri, 22 Aug 2003, Mike Burger wrote: > > > The first part is easy: Just take a look at /var/log/messages. > > > > The command is a little trickier, but, if the user has bash as their > > shell, you can just read their ".bash_history" files from their home dirs. > > > > On Thu, 21 Aug 2003, n30 wrote: > > > > > Guys, > > > > > > Know of any ssh log tools? > > > > > > I want to know when someone logs into my ssh server and the command that > > > they run....preferably real time... > > > is that too much to ask :). > > > > > > Thanks in advance > > > -N > > > > > > > > > > > > > > > -- _______________________________________________________________________ Tom Ryan Voice: 856-225-6361 Consulting System Administrator Fax: 856-969-7900 Rutgers School of Law - Camden -- Shrike-list mailing list Shrike-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/shrike-list
