LinuxQuestions.org
View the Most Wanted LQ Wiki articles.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 01-20-2006, 05:31 PM   #1
alagenchev
Member
 
Registered: Oct 2004
Location: USA
Distribution: Slackware, Debian, Ubuntu
Posts: 223

Rep: Reputation: 30
monitor user activity


Hi,

I am wondering if there is any easy to use tool, that can monitor user activity constantly. Something similar to gkrelm but for user activity. I would like to know who is logged in, how are they logged in(sftp,ssh, terminal), their traffic and activities. Is there anything like this available out there?

Thank you for your help.
 
Old 01-20-2006, 06:19 PM   #2
damicatz
Member
 
Registered: May 2004
Distribution: FreeBSD 7, Debian "Squeeze", OpenBSD 4.5
Posts: 167

Rep: Reputation: 30
The who and w commands provide information about user activities.
 
Old 01-20-2006, 09:16 PM   #3
alagenchev
Member
 
Registered: Oct 2004
Location: USA
Distribution: Slackware, Debian, Ubuntu
Posts: 223

Original Poster
Rep: Reputation: 30
true that, but do you think they show sftp activity and bandwith?
I guess I also need something that just sits on desktop or in console and shows in real time the info kind of like top.

Last edited by alagenchev; 01-20-2006 at 09:17 PM.
 
Old 01-20-2006, 10:33 PM   #4
damicatz
Member
 
Registered: May 2004
Distribution: FreeBSD 7, Debian "Squeeze", OpenBSD 4.5
Posts: 167

Rep: Reputation: 30
It should work for SFTP, since that's a subset of SSH.

You could use a BASH script to make it into a display of sorts :

Quote:
#!/bin/bash
#Simple script to display a monitor of user activity
#Ctrl-C Aborts

X=0
while [ $X -le 20 ]
do
w
sleep 5
clear
done
As for bandwidth, do you mean network traffic?
 
Old 01-20-2006, 10:58 PM   #5
alagenchev
Member
 
Registered: Oct 2004
Location: USA
Distribution: Slackware, Debian, Ubuntu
Posts: 223

Original Poster
Rep: Reputation: 30
hmm, very interesting, it works for ssh, but not for sftp. Yes, I mean network traffic, not bandwith. Do you have any other suggestions? Thank you for helping me out with this. I have a file server, and I would like to be able to tell when I have users logged on, and who's downloading the most. Thanks once again

Could you also explain this line:
while [ $X -le 20 ]
The part i don't understand is $X

I also forgot to let you know that I just tested it by connecting myself with sftp

Last edited by alagenchev; 01-20-2006 at 11:02 PM.
 
Old 01-20-2006, 11:02 PM   #6
Capt_Caveman
Senior Member
 
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658

Rep: Reputation: 57
Quote:
Originally Posted by alagenchev
Hi,

I am wondering if there is any easy to use tool, that can monitor user activity constantly. Something similar to gkrelm but for user activity. I would like to know who is logged in, how are they logged in(sftp,ssh, terminal), their traffic and activities. Is there anything like this available out there?

Thank you for your help.
Don't know of any *one* utility that can do that offhand...

Though for detailed accounting of user activities you might want to try the psacct package.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Monitor all activity to hard drive esckey2004 Linux - Security 2 01-07-2006 01:56 PM
Program to monitor wireless activity? dr_zayus69 Linux - Software 2 01-01-2006 10:55 AM
Linux system activity Monitor shiraz_1981 Linux - Software 1 10-10-2005 01:18 PM
Need program monitor for SMTP/internet activity korbind Linux - Software 6 04-16-2005 05:52 PM
What do you use to monitor server activity? Wonderer Slackware 8 11-02-2003 12:33 PM


All times are GMT -5. The time now is 11:29 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration