System Administration
cancel
Showing results for 
Search instead for 
Did you mean: 

Logging all activities for a telnet/ssh session

Brent Weaver_1
Occasional Advisor

Logging all activities for a telnet/ssh session

I am looking for guidance on how to log any activity a user does when logged into my HPUX server. Tee is not really working as well as I would like for two reasons:

1 - The user can exit out of the tee session
2 - The CR LF are different making the session unusable.

I thought that I could use exec to trap the user in the tee session but that is not working. Will screen be able to help me in any way? Another important thing to mention is that I am not only operating in a UNIX shell, the users also dip in and out of a utility layer/database command line. Of course ~/.sh_history is incomplete as it does not log when they are in the database utility.


Any advice is appreciated.
3 REPLIES
Shibin_2
Honored Contributor

Re: Logging all activities for a telnet/ssh session

You can't use sh_history to record the things in database. It's almost similar activity like, you jump from one host to another. When you jump from one host to another, you will be in another host and the history records on that host. You may have to consult with Database admin, whether any option to record those history. I think, there should be something.
Regards
Shibin
Matti_Kurkela
Honored Contributor

Re: Logging all activities for a telnet/ssh session

You need something you can run in place of the user's shell to capture all the input/output in the session. The open-source utilities "sudosh" and "rootsh" could do that.

Please see my answer in another thread:

http://h30499.www3.hp.com/t5/System-Administration/Alternative-to-saving-history/m-p/4768198#M389626


MK

MK
Viktor Balogh
Honored Contributor

Re: Logging all activities for a telnet/ssh session

If you ask me, I would use rootsh. It logs the entire session, also the DB activity. The latest version ported to HP-UX is 1.5.2, which you can find here:

http://sourceforge.net/projects/rootsh/files/rootsh/1.5.2/

****
Unix operates with beer.