Hello and Welcome from United States to the UNIX and Linux Forums! Thank You for Visiting and Joining Our Global Community.
|
Hello and Welcome from United States to the UNIX and Linux Forums! Thank You for Visiting and Joining Our Global Community.
|
|
google unix.com
|
|||||||
| Forums | Register | Forum Rules | Links | Albums | FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
 |
| Security Discuss UNIX and Linux computer and network security, cybersecurity, cyberattacks, IT security, CISSP, OWASP and more. |
More UNIX and Linux Forum Topics You Might Find Helpful
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| sendmail "root... User address required." error | csgonan | SUN Solaris | 10 | 04-03-2008 09:57 AM |
| Any way to know wt command has been executed from last 2-3 days ? | manoja422002 | UNIX for Advanced & Expert Users | 3 | 03-26-2008 10:22 AM |
| Command to find out user creation date | Crazy_murli | UNIX for Dummies Questions & Answers | 6 | 01-08-2007 09:30 AM |
| how to find the exit status for the last executed command | vijay.amirthraj | UNIX for Dummies Questions & Answers | 1 | 07-04-2006 10:14 PM |
| Mac address - what is line command to find and active new card | wmetz | IP Networking | 1 | 03-19-2002 04:44 PM |
 |
|
|
|
LinkBack | Thread Tools | Search this Thread |
Rating: 
|
Display Modes |
06-05-2008
|
||||
|
||||
Help Required: Command to find IP address and command executed of a user
Hi,
I am trying to write a script which would figure out who has run which command and their IP. As i dont have any clue as to which commands would do this job, i request some gurus to help me on this. Thanks Vishwas |
|
06-06-2008
|
||||
|
||||
|
Do you mean shell commands? The last command can show you when a user logged in and from where. There is no standard facility for recording individual commands, although some audit systems for doing this exist. What to recommend depends somewhat on which platform you are on. If I recall correctly even The GNU Accounting Utilities offer the basic tools for this.
|
|
08-06-2008
|
||||
|
||||
|
Like era said, accouting will do the job, but it will only give you the commands executed by a given user, not the IP address he/she used to enter your machine.
For something really accurate you could use grsecurity's patches which specially create a proc entry with the ip address of the user who created a given process. Not sure if selinux would help you with this. RSBAC also gives you IP information in its logs. |
| Sponsored Links | ||
|
|
Linear Mode
