topic Re: access log in Operating System - HP-UX

access log

Stf — Wed, 15 Dec 2004 11:51:26 GMT

Hello,

I try to find a way to configure /etc/syslog.conf to elaborate a log of user connection on my HPUX 11i server.

Am I in a wrong way with /etc/syslog.conf?

Is there any other existing logfile that already do that?

Or is there any script I could make to do that?

Pls help... Thx

Stf ;-)

Re: access log

Fred Ruffet — Wed, 15 Dec 2004 11:55:59 GMT

What about "last" command ?

Regards,

Fred

Re: access log

A. Clay Stephenson — Wed, 15 Dec 2004 11:58:54 GMT

You can alter the inetd setup to add -l (logging) but you are going to see a ton of data. Man inetd for details.

Re: access log

Sanjay_6 — Wed, 15 Dec 2004 12:07:21 GMT

Hi,

You can take a look at tcp_wrapper,

http://hpux.cs.utah.edu/hppd/hpux/Networking/Admin/tcp_wrappers-7.6/

Hope this helps.

Regds

Re: access log

Stf — Wed, 15 Dec 2004 12:15:39 GMT

your solutions looks good, but in fact my customer really want to do that by configuring /etc/syslog.conf to generate a logfile of connection tentative (good or bad.
He wants to know :
user / IP_adress / connection success or not / and if it's telnet or ftp etc...

Stf

Re: access log

A. Clay Stephenson — Wed, 15 Dec 2004 12:25:22 GMT

In that case, "inetd -l" is your boy. You can try this out by issueing an "inetd -l" command to a running session. This has the effect of toggling logging on or off each time it is used.

Re: access log

Claudio Martin_1 — Thu, 16 Dec 2004 11:26:46 GMT

Hi Stf:
you can "last -R" command for succesfull logins and "lastb -R" for unsuccesfull logins. Both commands display the information you need.

Good luck.
/Claudio

Re: access log

Stf — Wed, 29 Dec 2004 04:33:52 GMT

OK I tried tcp_wrappers but I have funny questions...:

where are the logs to monitor tcp connections?

how does tcp_wrappers works?

thx

Stf ;-)

Re: access log

Hoang Chi Cong_1 — Wed, 29 Dec 2004 05:00:29 GMT

Hi Stf

Just my idea....
Have you ever heard about eTrust software (This call : Access Control)?
It is a complete monitor and access tool for every Unix system.
But you have to buy it....
:) :)

Best and regard,
-HAPY NEW YEAR-
HoangChiCong