LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 02-06-2009, 09:15 AM   #1
srnsk
LQ Newbie
 
Registered: Dec 2008
Posts: 1

Rep: Reputation: 0
login activity monitoring


Hi all,
I am a newbie to linux and i want to monitor who are all logging into my server and what activities they are indulging. and i want to know if ppl who login using ssh are also monitored.
your help is appreciated very much
regards
senthil
 
Old 02-06-2009, 09:59 AM   #2
Agrouf
Senior Member
 
Registered: Sep 2005
Location: France
Distribution: LFS
Posts: 1,591

Rep: Reputation: 79
How are they logging to your server? If they are using bash, you can look at their .bash_history file.
 
Old 02-06-2009, 11:16 AM   #3
mapryan
LQ Newbie
 
Registered: Oct 2008
Location: London, UK
Distribution: SUSE
Posts: 19

Rep: Reputation: 0
Hi

There's two very different parts to your question. You can monitor who's logging into your system using the last command. This will include people who log in using ssh.

Monitoring what people are doing is a lot more difficult. As mentioned before, you can review shell history, but if you suspect someone of doing something naughty, if would be easy for them to cover their tracks by overwriting the history file. There are packages to allow you to do audit this in a secure fashion, but the ones I am aware of are paid for products, such as Powerbroker (http://www.symark.com/products/pboverview.html)

Unfortunately, Linux doesn't have a central accounting/audit file where all this stuff is stored, although most apps (like ftp, ssh, telnet) will drop a note in the /var/log/messages file when someone logs in or out

Hope this helps

Cheers

Mike
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
PC monitoring activity ariosma Linux - Networking 2 10-19-2006 12:20 AM
monitoring disk activity in GKrellM ScottReed Linux - Software 1 02-04-2006 05:18 PM
monitoring user activity buehler Linux - Security 1 09-02-2005 04:46 PM
firewall activity monitoring tool schatoor Linux - Software 1 06-25-2004 05:05 PM
Hard drive activity monitoring bkeating Linux - General 1 05-24-2002 05:40 AM


All times are GMT -5. The time now is 04:56 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration