access log

[Stf]

Hello,

I try to find a way to configure /etc/syslog.conf to elaborate a log of user connection on my HPUX 11i server.

Am I in a wrong way with /etc/syslog.conf?

Is there any other existing logfile that already do that?

Or is there any script I could make to do that?

Pls help... Thx

Stf ;-)

[Fred Ruffet]

What about "last" command ?

Regards,

Fred

[A. Clay Stephenson]

You can alter the inetd setup to add -l (logging) but you are going to see a ton of data. Man inetd for details.

[Sanjay_6]

Hi,

You can take a look at tcp_wrapper,

http://hpux.cs.utah.edu/hppd/hpux/Networking/Admin/tcp_wrappers-7.6/

Hope this helps.

Regds

[Stf]

your solutions looks good, but in fact my customer really want to do that by configuring /etc/syslog.conf to generate a logfile of connection tentative (good or bad.
He wants to know :
user / IP_adress / connection success or not / and if it's telnet or ftp etc...

Stf

[A. Clay Stephenson]

In that case, "inetd -l" is your boy. You can try this out by issueing an "inetd -l" command to a running session. This has the effect of toggling logging on or off each time it is used.

[Claudio Martin_1]

Hi Stf:
you can "last -R" command for succesfull logins and "lastb -R" for unsuccesfull logins. Both commands display the information you need.

Good luck.
/Claudio

[Stf]

OK I tried tcp_wrappers but I have funny questions...:

where are the logs to monitor tcp connections?

how does tcp_wrappers works?

thx

Stf ;-)

[Hoang Chi Cong_1]

Hi Stf

Just my idea....
Have you ever heard about eTrust software (This call : Access Control)?
It is a complete monitor and access tool for every Unix system.
But you have to buy it....
:) :)

Best and regard,
-HAPY NEW YEAR-
HoangChiCong