LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 10-09-2017, 09:32 AM   #16
hack3rcon
Senior Member
 
Registered: Jan 2015
Posts: 1,432

Original Poster
Rep: Reputation: 10

Quote:
Originally Posted by Shadow_7 View Post
tcpdump can capture the raw packets, so there's probably way. But only IF you were recording the traffic at the time. Or some iptables mechanism to record the packets that were rejected/logged. Then again encryption is a thing now, so you'd have to know the key(s) and the data to translate. Or have tools that knows those things for you. wireshark? idk, not my wheel house.
Can iptables capture it?
 
Old 10-09-2017, 10:41 AM   #17
michaelk
Moderator
 
Registered: Aug 2002
Posts: 21,594

Rep: Reputation: 4164Reputation: 4164Reputation: 4164Reputation: 4164Reputation: 4164Reputation: 4164Reputation: 4164Reputation: 4164Reputation: 4164Reputation: 4164Reputation: 4164
No, ssh traffic is encrypted anyway. iptables can not detect if a password is being entered.
 
Old 10-10-2017, 06:03 AM   #18
hack3rcon
Senior Member
 
Registered: Jan 2015
Posts: 1,432

Original Poster
Rep: Reputation: 10
Quote:
Originally Posted by michaelk View Post
No, ssh traffic is encrypted anyway. iptables can not detect if a password is being entered.
not SSH, Just regular Login.
 
Old 10-17-2017, 09:11 AM   #19
hack3rcon
Senior Member
 
Registered: Jan 2015
Posts: 1,432

Original Poster
Rep: Reputation: 10
Can I see it?
 
Old 10-17-2017, 10:11 AM   #20
michaelk
Moderator
 
Registered: Aug 2002
Posts: 21,594

Rep: Reputation: 4164Reputation: 4164Reputation: 4164Reputation: 4164Reputation: 4164Reputation: 4164Reputation: 4164Reputation: 4164Reputation: 4164Reputation: 4164Reputation: 4164
Not that I am aware of.
 
Old 10-21-2017, 04:04 AM   #21
hack3rcon
Senior Member
 
Registered: Jan 2015
Posts: 1,432

Original Poster
Rep: Reputation: 10
Thus, I can't see which passwords entered when I'm not at the desk?
 
Old 10-21-2017, 05:04 AM   #22
Shadow_7
Senior Member
 
Registered: Feb 2003
Distribution: debian
Posts: 4,137
Blog Entries: 1

Rep: Reputation: 873Reputation: 873Reputation: 873Reputation: 873Reputation: 873Reputation: 873Reputation: 873
It depends on how things are configured. There are many ways to log things. Screen capture, packet capture, key logger, application logs, perhaps it's more of a where do I look, versus how do I do? Things like iptables are meant to "filter" packets, with some logging. Other things like tcpdump can capture all the packets in their raw format. Which could take some knowledge and time to interpret to human meaningful bits. Or various programs to do that translation for you.
 
Old 10-21-2017, 06:54 AM   #23
hack3rcon
Senior Member
 
Registered: Jan 2015
Posts: 1,432

Original Poster
Rep: Reputation: 10
Thank you.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Iptables rule help linuxcenter Linux - Security 3 06-26-2013 06:21 AM
iptables: rule with RETURN target just after a rule with ACCEPT target Nerox Linux - Networking 6 09-04-2011 03:33 PM
iptables rule kim_bcs Linux - Security 1 01-28-2011 09:34 AM
iptables rule bkcreddy17 Linux - Security 2 01-20-2009 06:38 AM
What is it doing this iptables rule?? lanczer Linux - Security 1 02-24-2006 11:26 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 06:22 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration