topic Re: Sniffing the data from a user session in Operating System - OpenVMS

Sniffing the data from a user session

Alon Jacob — Tue, 23 May 2006 07:02:06 GMT

Hello all,

Can anyone tell me if there is a freeware that allows me to remotly watch a user session (like VNC or PCANYWHERE on windows platforms)?
Alternatively, if you know of some freeware that will "sniff" and show me what carachters are being sent and recieved fron and to my ALPHA server (either to run from the alpha or my PC).

Thanks.

Re: Sniffing the data from a user session

Dave Laurier — Tue, 23 May 2006 07:27:03 GMT

Hi,

I do not believe there is something similar available for OpenVMS.

If the alternative of capturing the output of user sessions is enough for you then could implement a USER_LOG account as described in the OpenVMS Guide to Security ("Logging a user's session"):

http://h71000.www7.hp.com/doc/732FINAL/aa-q2hlg-te/aa-q2hlg-te.PDF

Or if you are interested in developing a key logger yourself then you could have a look at the LOGGER source-code (pseudo-terminal) from Forrest A. Kenney. I have attached the ZIP file to this message because I do not know anymore where I got it from.

Best regards,

Dave Laurier

Re: Sniffing the data from a user session

Dave Laurier — Tue, 23 May 2006 07:32:32 GMT

And now I also found where I got it from, Hunter Goatley's fileserver:

http://vms.process.com/scripts/fileserv/fileserv.com?LOGGER

Description: Log terminal sessions using FT pseudo-terminal driver
Version: 21-DEC-1993
Author: Forrest Kenney
Architecture: VAX,AXP
Size: 74 blocks
Language: C

Re: Sniffing the data from a user session

Wim Van den Wyngaert — Tue, 23 May 2006 07:34:21 GMT

http://www.raxco.com/products/RaxcoSupport/more_info.cfm

But I would trace the network packets with eg tcptrace for a 1-shot snif.

Wim

Re: Sniffing the data from a user session

Andy Bustamante — Tue, 23 May 2006 10:40:21 GMT

As Win says TCPTRACE can be used to capture data on an IP connection.

Ethereal, available free at http://www.ethereal.com/ can read the VMS TCPTRACE file formats and allow you view a session within a large capture. If I ever meet Marc Milgram who added this functionality, I owe him a dinner and beer.

Andy

Beerware: If it works you can buy me a beer. If it doesn't work buy me a pitcher and I'll see what can can be done about it.

Re: Sniffing the data from a user session

Peter Barkas — Wed, 24 May 2006 07:41:53 GMT

I used to use 'Supervisor Series' from the Freeware CD in the old days on VAX, but I don't know if there is a verion that works on Alpha.

Re: Sniffing the data from a user session

Wim Van den Wyngaert — Wed, 24 May 2006 10:51:41 GMT

Wonder if there is a T software piece allowing to duplicate X-windows output ...

Wim

Re: Sniffing the data from a user session

Willem Grooters — Wed, 24 May 2006 17:56:14 GMT

Ethereal (on Windows or Linux) will probably do the job. It allows you to gather alll network information and store it in a file you can examine off-line.