monitoring user activity

buehler · 09-02-2005, 12:27 PM

i'm administering a Mandrake 10.0 system and was wondering if anybody could recommend any tools to monitor user activity. in particular i would like to see if any of the users is trying to hack the system from the inside. so far i've been manually looking at /home/user/.bash_history and /var/log/auth.log files.

neilcpp · 09-02-2005, 03:46 PM

I would Just install a firewall & view the logs now and again, for attempts to connect to unauthorised services