Monitoring Logged In Users

MadTurki · 01-22-2004, 10:52 AM

I'm looking for a way to monitor users that are logged in, see what objects they're retrieving, what they're mounting or mapping and stuff like that. I've looked a bit at "last" and "w" but it doesn't give me exactly what I'm looking for - not as detailed.

I remember doing this back in the day on NT4 server and it was real easy. I just cant find what to use here. Running RedHat 9. Thanks!

david_ross · 01-22-2004, 01:43 PM

Running "mount" will tell you what they are running. To wee what processes they have running you can use "ps"

mac_phil · 01-22-2004, 01:47 PM

ps aux | grep username

MadTurki · 01-22-2004, 01:51 PM

Well, I have a fileserver that I know at least 4 people have mounted right now. But when I ran "mount" it only said what I was mounting, and not who was mounting from me. But when I ran "ps -ef | grep smb" that actually worked quit well I guess! At least for my fileserver. But didn't help a lot on the web server... I could only grep for httpd but that shows how many server instances are started right, and not how many users are actually connected.... Thanks

david_ross · 01-22-2004, 02:03 PM

Try:
smbstatus

MadTurki · 01-22-2004, 02:11 PM

Hey hey! That's pretty sweet too. That's exactly what I want for the file server! Is there something similar for an http server?

david_ross · 01-22-2004, 02:19 PM

Just take a look at your access logs.