topic SSH command logging in Operating System - Linux

SSH command logging

Eli_pok — Wed, 04 May 2011 13:45:21 GMT

Hi,

I have a products that connects to my servers remotely (ssh) and executes commands.

I have a filling the product does something nasty...

I tried running script (command) inside .basrc but I get an infinite loop, starting a new bash inside bash make the product stuck.

Is there a way to log commands that are being executed remotely via ssh ?

The server is windows and my clients are RedHat Linux (4.8-5.5).

Thanks ahead,
Ilia.

Re: SSH command logging

Lucifer Megacruel — Wed, 04 May 2011 18:14:17 GMT

Try Snoopy Logger : http://sourceforge.net/projects/snoopylogger/

--Lucifer

Re: SSH command logging

ARUNPRAKASH — Thu, 05 May 2011 02:25:17 GMT

Dear,

ssh @

try this.

Re: SSH command logging

Eli_pok — Thu, 05 May 2011 03:52:26 GMT

Isn't there any system command for that ?

Re: SSH command logging

Michael Steele_2 — Thu, 05 May 2011 18:02:37 GMT

sshd_config must be modified to enable SyslogFacility (normally auth) and LogLevel must be set to VERBOSE. These settings enable syslog to log the fingerprints of the key pair used for access.

This functionality is enabled by setting an option in the public key:
command="/root/bin/sshroot" ssh-dss AAAAB3NzaC1kc3MAAACBALKnuTrmoeO6X1TI6gWSq5ysxx [[ LOTS snipped ]]

From forum member DKOLeary.

You want to read the attaced, towards the bottom - Required/suggested modifications: