Re: Watching user

From: Nico Kadel-Garcia (nkadel_at_verizon.net)
Date: 08/31/03 

Date: Sun, 31 Aug 2003 13:08:19 GMT

Juha Siltala wrote:

> In article <pan.2003.08.31.07.47.46.765299@gameprog.it>, NighTiger wrote:
>
>
>>when a user connect to me through ssh server, how I can look what
>>him do?
>
>
> w - Show who is logged on and what they are doing.
>
> lsof - list open files (see the -u option)
>
> fuser - identify processes using files or sockets
>

And if they're using "bash" as their shell, look t their personal
.bash_history file. Or if you want to be really fascist, replace their
shell with one that records every key stroke (a technique usually used
by crackers to record other people's keystrokes on machines the cracker
has broken into).

Relevant Pages

  • Re: port forwarding without the shell
    ... > valid shell on the ssh server, I can only use it for port forwarding. ... You can use "ssh -N" to establish a tunnel without invoking a shell, ... Good judgement comes with experience. ...
    (SSH)
  • Re: perl and ssh .. missed the point
    ... If I install ... > a Windows tool, I want a Windows shell presented ... > to the users, not a BASH shell. ... or better be fighting to get an ssh server ...
    (microsoft.public.win2000.cmdprompt.admin)
  • Re: Where does the "prompt come from"
    ... > connection towards an SSH server. ... > Is it sent by the remote shell or is it handled in the client ?? ... The box you ssh into provides the prompt. ... contain using that accounts shell commands and/or users's shell startup files. ...
    (comp.security.ssh)
  • Using SuSE Linux 6.2 with openshh 3.0.2
    ... After installing the ssh server i used the SSH Secure ... shell to login. ... So I wanted to change to the SSH2 Protocol. ...
    (comp.security.ssh)