Finding Telnet Login IP Address

markjuggles · 02-19-2009, 12:38 PM

Hi,

I have a user login to a NetBSD machine via telnet from my company's proxy at work.

How can I determine the IP address of the telnet session?

Back in my Solaris days, this was available from 'who' or 'w'.

Thanks,

Mark

jschiwal · 02-19-2009, 12:45 PM

Does NetBSD have netstat?

Code:

sudo netstat --inet -p | grep ssh

tcp        0      0 192.168.1.104:ssh       qosmio.jesnet:58788     ESTABLISHED 25559/sshd: username
tcp        0      0 192.168.1.104:ssh       qosmio.jesnet:50878     ESTABLISHED 7169/sshd: username

I'm surprised that your version of 'who' doesn't indicate the IP address.

By the way, why is telnet being used? Why not ssh?

markjuggles · 02-19-2009, 01:19 PM

That may work. I will need to write a script to parse the output of the netstat -n command.

Why? My IT team shut down ssh but left telnet open. If I ask, they will claim that closing ports improves security. I have learned that talking to them is a waste of time and am in the mode of "choosing my battles". Their attitude is that Engineering complicates their lives immensely and would prefer that we disappear. (It's mutual!)

Thanks for the help,

Mark