LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 02-22-2013, 03:26 AM   #1
Michael_Tze
LQ Newbie
 
Registered: Feb 2013
Posts: 8

Rep: Reputation: Disabled
How to watch SSH access


Hello,

I have full root access on my server, and i give also root access for my admin tech, so he can install or modified anything as necessary,
My question how to watch in REALTIME what he is doing on the server, like install or modified anything.
In windows like teamviewer, i can watch what he is doing.

This is not because not trust my admin tech, just sometimes i want to see what is he doing, is there any wrong or not.

I hope anyone can show me how to do.
Thank you
 
Old 02-22-2013, 03:40 AM   #2
RaviTezu
Member
 
Registered: Nov 2012
Location: India
Distribution: Fedora, CentOs, RHEL
Posts: 164

Rep: Reputation: 24
Do you mean in graphical mode?
If YES ..Short answer will be "TigerVNC".. Like Teamviewer you have to install this on your server.
If NO.. you can make use of some commands like "ps,top,w...etc"

---------- Post added 02-22-13 at 03:11 PM ----------

Here the Info. on tigerVNC.
 
Old 02-22-2013, 04:03 AM   #3
Michael_Tze
LQ Newbie
 
Registered: Feb 2013
Posts: 8

Original Poster
Rep: Reputation: Disabled
Hi, thanks to answer,
Yes, i want to see in graphic mode, like UVNC or teamviwer.
And I had download TigerVNC.

Question using TigerVNC.
You must know, my admin tech use other computer, like laptop or anything PC in my office.
I'm forbid them, to add monitor or keyboard on the server (because i'm afraid my tech or other people make a problem like cable power cut or lan or anything which can make server down).

So i give my admin tech root password so, he can install or anything necessary.

My question is how to watch what he is doing, if my tech typing some code or anything.

Thank you
I hope you can help me..i'm very grateful about that.
 
Old 02-22-2013, 04:45 AM   #4
RaviTezu
Member
 
Registered: Nov 2012
Location: India
Distribution: Fedora, CentOs, RHEL
Posts: 164

Rep: Reputation: 24
Ok. I need some information.
First, is graphical mode enabled on the server(which your admin is trying to access).

Last edited by RaviTezu; 02-22-2013 at 05:11 AM.
 
Old 02-22-2013, 05:13 AM   #5
RaviTezu
Member
 
Registered: Nov 2012
Location: India
Distribution: Fedora, CentOs, RHEL
Posts: 164

Rep: Reputation: 24
Second, how the admin will access the server? Using command line interface or using some other application like VNC?
 
Old 02-22-2013, 06:35 AM   #6
Michael_Tze
LQ Newbie
 
Registered: Feb 2013
Posts: 8

Original Poster
Rep: Reputation: Disabled
First I'm using centos 5.8 64Bit in TEXT Mode.
Second, The admin will using SSH to access the server, like using SecureCRT..etc.
Can you show me like log files or any files, my admin has been write or he is doing.
If i see in the history i just see command he type.
but in the vi command, i don't know what he is write in there.
or i don't know what files he is install or he is delete...etc.

I need to know, if he is install than give log what files, and if he is modified using vi or editor, will record command he is doing.

just for your information my server contain in sale online, there are so many product.
Once again, not because i don't trust my admin, but you know if we have employee, sometimes we must check what he does right ?

I hope you can help me.

Thank you for your help.
 
Old 02-22-2013, 08:19 AM   #7
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Please see http://www.linuxquestions.org/questi...0/#post4897500
 
Old 02-22-2013, 09:43 PM   #8
Michael_Tze
LQ Newbie
 
Registered: Feb 2013
Posts: 8

Original Poster
Rep: Reputation: Disabled
Hi..
Can you give some explanation, i see still not clear for that.
Thank you
 
Old 02-22-2013, 10:59 PM   #9
compassnet
Member
 
Registered: Feb 2013
Distribution: Slackware
Posts: 50

Rep: Reputation: 8
Here's something that I use:

$ tail -f /var/log/messages

What that command does is output the last 10 lines of /var/log/messages and follows (-f) the changes, so for example, whenever I insert a USB Pendrive I see in real time what is happening, because it affects /var/log/messages. Sometimes the following fails (doesn't update), but I still need to check why (I don't think it's a bug but rather the log cycling).

I think this is what you want, so check the application called "screen". It might come handy for you if you want to follow multiple applications/log files:

screen1: $ tail -f /var/log/messages
screen2: $ tail -f /var/log/syslog
screen3: $ tail -f /var/log/secure

and so on.

Whatever program you want to follow in real time, just use the tail command above on the log file that your program generates, and also make sure you have read permissions for the file and you're done.

compassnet.
 
1 members found this post helpful.
Old 02-23-2013, 12:25 AM   #10
Michael_Tze
LQ Newbie
 
Registered: Feb 2013
Posts: 8

Original Poster
Rep: Reputation: Disabled
Hi,
How if my admin typing some command using vi editor, is it the command still record in the log files ?

Thanks for your help
 
Old 02-23-2013, 12:37 AM   #11
frieza
Senior Member
 
Registered: Feb 2002
Location: harvard, il
Distribution: Ubuntu 11.4,DD-WRT micro plus ssh,lfs-6.6,Fedora 15,Fedora 16
Posts: 3,233

Rep: Reputation: 406Reputation: 406Reputation: 406Reputation: 406Reputation: 406
there is the 'history' command, and you COULD install a keylogger or ttysnoop perhaps(bad idea)

the real key that nobody here has mentioned is, why go through such lengths to babysit your admin, you should either trust him/her to obey your rules, or don't give them the keys to the car so to speak, and find someone you CAN trust.
 
Old 02-23-2013, 02:31 AM   #12
whizje
Member
 
Registered: Sep 2008
Location: The Netherlands
Distribution: Slackware64 current
Posts: 594

Rep: Reputation: 141Reputation: 141
You could ask (make a script to run) that is filled in with a short description what the access was for and which files are edited. If you are gonna use it for yourself to you got your own change management log.
 
Old 02-23-2013, 04:35 AM   #13
Michael_Tze
LQ Newbie
 
Registered: Feb 2013
Posts: 8

Original Poster
Rep: Reputation: Disabled
Sure I'm agree to trust admin, but still not good enough for business, money can talk this make the problem, for now i can trust, but later no one knows what will be, not easy for me to find a trusted admin.
I'm sorry, if i can not trust 100% for admin, because i have experience for that.
That's why, I just need to record all he is doing(like type command, installing files, delete files etc).
I hope, anybody can help me to solve my problem.
I'm very grateful for that.
Once again, Thank you
 
Old 02-23-2013, 05:04 AM   #14
compassnet
Member
 
Registered: Feb 2013
Distribution: Slackware
Posts: 50

Rep: Reputation: 8
Quote:
Originally Posted by Michael_Tze View Post
Hi,
How if my admin typing some command using vi editor, is it the command still record in the log files ?

Thanks for your help
That's a tricky question.

Elvis (vi clone) has the (sh) command. If you're in Elvis and type ":sh" you'll be sent to a shell, and from there I don't think .bash_history will log any commands.

Seems that in the end what you want is a keylogger for Linux. I can't help you with that. Search on google.

compassnet.
 
1 members found this post helpful.
Old 02-23-2013, 05:10 AM   #15
Michael_Tze
LQ Newbie
 
Registered: Feb 2013
Posts: 8

Original Poster
Rep: Reputation: Disabled
Is there any good websites where i can download keylogger, and how to install in centos 5.8 64bit ?
Thank you
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Using ssh command with watch sergani Linux - Server 5 08-21-2011 08:28 AM
SSH access problems: Can only allow users SSH access by adding to root group dhupke Slackware 10 12-21-2008 09:48 AM
LXer: Uh Oh. Another Smooth Move from Microsoft: Watch out, Ruby. Watch out OSI. LXer Syndicated Linux News 0 07-30-2007 11:46 PM
Samba Upgrade Watch (For User Level Access Control Support) Larry James Linux - Networking 7 11-08-2000 11:13 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 07:29 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration