Detail Logging

Lucasite · 03-06-2004, 05:44 AM

Hi,

I have a basic setup, RH9, sitting on my LAN but also on connected to broadband.

Can anyone tell me how to increase the standard logging thats already enabled, so I see if anyone hacks it, and what they are up to?
I've seen on here before where someone had line by line detail of what a hacker did, but it didnt explain how to enable this feature.

Many thanks.

chort · 03-06-2004, 06:10 AM

Which post were you referring to? The recent one (last couple of days) that included the shell history, or the one from several weeks ago that showed the Windows exploits being used against Samba?

The first is an aspect of the shell (most shells save some number of previous commands in a /home/user/.history file). The second requires Snort (most ditros have a package for Snort IDS).