get ip of user executed program

ilansch · 05-28-2017, 03:33 AM

In my kernel module driver, during the execution of program (e.g mkdir) I need to find out the IP of the currently logged in client that executed this program.

One solution is to climb up in the process tree, go to init process, then start going down in the process tree, look for sshd, cross between the user id and the sshd session, perform a netstat and get the Foreign Address.

Is the a better efficient way to get the ip of the user ?

Habitual · 05-28-2017, 06:08 AM

Quote:

Originally Posted by ilansch

Is the a better efficient way to get the ip of the user ?

Code:

lsof -u $LOGNAME  | grep ssh | grep ESTAB

"better" = IDK what's better, or better efficient.
I suppose your own code would be "best", yes?
There are as many ways to execute as there are admins.

Good luck.

NevemTeve · 05-28-2017, 08:58 AM

@OP: also check these: crond, atd, initd, systemd -- they do start programs without any user/client/IP

onebuck · 05-28-2017, 09:06 AM

Please post your thread in only one forum. Posting a single thread in the most relevant forum will make it easier for members to help you and will keep the discussion in one place. This thread is being closed because it is a duplicate of https://www.linuxquestions.org/quest...am-4175606810/