Monitoring telnet sessions

[John Curtis]

I got some users coming across a VPN that frequently complain of not being able to connect to our server, it's a telnet session. I think it's probably a network issue of some sort, but I want to monitor their activity. Is there a log file that I can check for recent telnet connections to the server?
Thanks

[Roger Baptiste]

hi,

This should help :
#grep telnet /var/adm/syslog/syslog.log

#last (shows the history of logins)

-raj

[harry d brown jr]

If they aren't able to connect, then there won't be a log. How many npty's (only if you are not running 11.x) do you have defined?? That limit's the number of telnets. In 11.x its the kernel parameter nstrtel.

live free or die
harry

[Craig Rants]

Make sure that in the /etc/rc.config.d/netdaemons file that your INETD_ARGS variable is set to "-l", otherwise you won't get to see those telnet connections because inetd is not logging.

Also you can see the telnet connections by port with netstat -an | grep .23

Good Luck,
C

[G. Vrijhoeven]

Hi,

You can use the commands RayMan gave you for history. to monitor their activity you can use nettladm (ux11)

Gideon