How to track samba users
At my office we are having a samba sever, staff will access their respective folder from their Windows XP systems. I wish to track all user access activity like file creation, modification, deletion and etc. I tried smbstatus -v, from the output I am not able to guess what the user done. I am giving some of the results I get please help me or you can suggest best way to get access log.
Samba version 3.0.25b-0.el5.4 PID Username Group Machine ------------------------------------------------------------------- 14721 govind govind tsl-019 (10.0.2.64) 4832 chandra chandra trivent-9b92c9c (10.0.2.106) Service pid machine Connected at ------------------------------------------------------- IPC$ 9972 tsl-042 Fri Mar 18 16:40:29 2011 MEDMGMT 9852 tsl-0012 Fri Mar 18 16:39:13 2011 Legal Mgmt 9852 tsl-0012 Fri Mar 18 16:39:20 2011 MGMT HEAD 9852 tsl-0012 Fri Mar 18 16:39:12 2011 IPC$ 9858 tsl-0012 Fri Mar 18 16:39:47 2011 Legal 9852 tsl-0012 Fri Mar 18 16:39:23 2011 Sys Admin 14721 tsl-019 Fri Mar 18 21:29:35 2011 Operations 9852 tsl-0012 Fri Mar 18 16:39:09 2011 Locked files: Pid Uid DenyMode Access R/W Oplock SharePath Name Time -------------------------------------------------------------------------------------------------- 4832 564 DENY_NONE 0x2019f RDWR NONE /home/Datas/ Drafting/Clients/Jeanette/Jeanette.xls Fri Mar 18 19:09:31 2011 Regards Vivek |
Might be a place to start: http://search.cpan.org/~affc/Parse-Log-Smbd-0.02/
|
|
All times are GMT -5. The time now is 03:56 AM. |