Watching SSH pts/# connections live...

KneeLess · 01-20-2004, 09:42 PM

How would I go about watching /dev/pts/x and still let his commands go through? If I cat it then he doesn't recieve any stdout. This has been bothering me for quite some time, and your help is appreciated. Thanks.

vladkrack · 01-22-2004, 07:45 AM

For the tty's you could use the /dev/vcs[0-63], but for the same efect to pts, I don't know...

Maybe could be used an scriptusing ps ...

KneeLess · 01-22-2004, 11:34 AM

I think I've solved the problem. The command 'cat /dev/pts/0 | tee -a pts0log' will work, to log it to a file. Tee takes input and writes to a find and prints to stdout. Well, I guess I'll test it.

mac_phil · 01-22-2004, 01:49 PM

If you want to watch a specific connection live, use screen. It allows you to watch a user in real time. man screen, and google screen user's guide. (It has a chapter on multiple users.)

Otherwise I'm not aware of any way to 'watch', in real time, a random login.

rex · 01-22-2004, 06:42 PM

try ttysnoop

that lets you watch and control a users session.

there are other ways that log users commands via inserting a module into the kernel but that gets a bit complicated unless you know what your doing.

there's also a key logger program on freshmeat. It doesnt pick up all the characters but it works sufficiently