LinuxQuestions.org
Go Job Hunting at the LQ Job Marketplace
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
LinkBack Search this Thread
Old 04-02-2005, 10:53 AM   #1
houler
Member
 
Registered: Mar 2005
Distribution: Slackware 10.1, Kernel 2.6.14.4 (custom)
Posts: 166

Rep: Reputation: 30
Keylogger / session monitoring in real time?


I'm looking for a keylogger/real-time SSH session monitor (if there is such util) for Slackware 10.1.

Kind of like a Terminal Server/VNC for SSH sessions. Where I don't have to 'cat log' or 'pico log', everytime.

or

Something like reading log files in real-time and seeing it update.

For What? :

This is for Administrative reasons. I want some people to ssh to my slackware 10.1 box, and I want to monitor them. Also, it's a part-time hobby of mine trying to be a Linux admin.


So far I tried Vlogger 2.1.1:

It's a great utility, but I don't know how to shut it off when I want it to. when I do ./vlogctrl unload, it says something like "rmmod: vlogger module is not loaded". When I go to the log file, I see it keeps on logging. I Wish I could turn it off when I want it to shut off. It also seems to crash my box causing a reboot and going through that disk check utility (when it does crash, vlogger won't run, so that's one way of shutting if off...heh). When I don't want it to shut it off, it works pretty well. Not sure if it produces output as if it were real time. (eg. vnc, terminal server)

---edit---
I've been doing 'cat log' everytime to see the contents of the log file, which gets pretty cumbersome after a while,

---edit---

I also tried using "TTYRPLD" but I couldn't get the patch to work (syntax was exactly the same in the instructions, but pertaining to my kernel) and it gave me some bogus error which I ignored, then later deleted the files, because I didn't know how to fix it.

Another program I looked into is LKL0.1.0, but it looks like it's used only for local purposes (correct me if im wrong).


Any other key/session logger I should try out?

Last edited by houler; 04-02-2005 at 11:18 AM.
 
Old 04-03-2005, 04:10 AM   #2
TylerD75
Member
 
Registered: Aug 2004
Location: Norway
Distribution: Gentoo
Posts: 94

Rep: Reputation: 17
Not really a proggie, and you probably know about it, but I use tail -f /var/log/<logfile> to get a realtime view of the log...

Last edited by TylerD75; 04-03-2005 at 04:11 AM.
 
Old 04-06-2005, 09:21 PM   #3
neo77777
LQ Addict
 
Registered: Dec 2001
Location: Brooklyn, NY
Distribution: *NIX
Posts: 3,704

Rep: Reputation: 55
You can also use roottail, it is a simple utility that will tail the log files and output them to your desktop, you can costumize it for diffrent log files and diffrent color scheme to alert you (visually) of what is going on log-wise.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
SSH Session Monitoring? totalrockage Linux - Networking 1 04-08-2005 01:01 AM
Just discovered sensors - near-real-time hardware monitoring BrianK Linux - General 1 03-25-2004 06:23 PM
Real Time Equalizer st00 Linux - Software 1 03-20-2004 06:00 PM
real-time OS h/w Programming 11 01-24-2004 08:28 PM
Real Time Plot... DaFrEQ Linux - Software 0 08-27-2002 08:25 AM


All times are GMT -5. The time now is 02:36 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration