Login or Register to Ask a Question and Join Our Community


Solaris

Logged input to specific port?

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Operating Systems Solaris Logged input to specific port?
# 1  
Old 02-26-2004
Logged input to specific port?
Hi,


Anyone know how I can log all input - when a user logs in to a specific port number ie if user telnet to port specifically telnet 0 4800

I want to log all input that the user inputs..

Is this possible??
Is the sun solaris forum the correct forum or should this perhaps go under some scripting forum instead?

Any help is appreciated...
# 2  
Old 02-26-2004
you can use snoop and redirect the output to a file.
if memory serves me correctly there is a switch for snoop to send the data directly to a file also.
# 3  
Old 02-26-2004
Hi...
Unfortunately - Snoop does not seem to log all input from the user. I have tried this previously but it is not giving me all the detail I need - and also , I cannot limit this to just one port, it seems to snoop the whole interface.



Any other ideas?

Smilie Smilie
# 4  
Old 02-26-2004
You need to look at the -v or -V options and realize you would need quite a bit of disk space for all the info you would gather - also, you need to look at the from or src expressions to cut it down to the port.
Quote:
From the snoop man page:

from or src
a qualifier that modifies the following host, net, ipaddr, etheraddr, port, or rpc primaitive to match just the source address, prot, or RPC reply.
# 5  
Old 02-27-2004
......
you could try the command "script". load it in the .profile....

greetings Preßy
# 6  
Old 03-03-2004
Capture input to specific port
All,

I have a user who is let's say - abusing a service on my server.
I do not know who the user is and need to track them.

They are using a service on a specific port, but I cannot seem to trace this using any scripts/commands.

Someone recommended using the snoop command but this is not helping me..


Any one else got any ideas?
# 7  
Old 03-03-2004
I merged the threads.

I also think snoop is the best answer. Why is it not helping you?

The only other answers would be a sniffer, or rewrite the server to produce extensive logs.
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Solaris

Block port for all except for one specific ip in Solaris11.4

Hi, I need to block ssh port 22 from all the servers except one server ip. Until solaris11.3 and below, I used to do like below(under /etc/ipf/ipf.conf),and it's working fine pass in quick from $server_ip to any port=22 block in quick from any to any port=22 But I tried almost same in... (1 Reply)
Discussion started by: Sumanthsv
1 Replies

2. Shell Programming and Scripting

IP list specific port checker script

Hello again people, I currently searching for a code/script that will allow it to check if a specific port is open, lets say 123. Found a public script on a ftp but I dont know how and what to modify in it to suit my needs. (I think this is a evil code and I want to use it as an example). ... (3 Replies)
Discussion started by: galford
3 Replies

3. Shell Programming and Scripting

Need to give input once logged in to server in script

Hi , when i am logging to the server i need to give input of specific key like k or l or m etc. and then need to put enter. need to use this in script . please assist. (1 Reply)
Discussion started by: rupesh.bombale
1 Replies

4. IP Networking

Bandwidth shaping on specific port

Hi, I've been looking for a few hours now, reading various docs and man pages, but the info I found so far is either not what I was looking for or I just don't get how to do the thing I need.... So, my "problems" is that I have a server running on a specific port and I need to shape traffic... (2 Replies)
Discussion started by: Zamba
2 Replies

5. Solaris

how to open a specific port

Hi All, Can anyone let me know that how to open a specific port in Solaris 10. I just wanted to know if there are some certain commands to open a port (like ftp, telnet). It would be also better if someone can tell me if there is another firewall service in Solaris 10 except ipfilter. ... (6 Replies)
Discussion started by: naw_deepak
6 Replies

6. Solaris

how to open specific port

Dear members, My release is open Solaris b103 1- How to know the opening port in my system 2- How to open a specific port like port number 53 3- How to closed the specific port like port number 53 Your feedback highly appreciated (10 Replies)
Discussion started by: dellroxy
10 Replies

7. Shell Programming and Scripting

Reading specific contents from 1 input files and appending it to another input file

Hi guys, I am new to AWK and unix scripting. Please see below my problem and let me know if anyone you can help. I have 2 input files (example given below) Input file 2 is a standard file (it will not change) and we have to get the name (second column after comma) from it and append it... (5 Replies)
Discussion started by: sksahu
5 Replies

8. UNIX for Advanced & Expert Users

telnet on specific port??

Hi all, I have a problem. I have machine names and their IP addresses in /etc/hosts file. My application does telnet on that machine host name. The application does not uses IP address for tenet. It will fetch the host name from /etc/hosts file. Now the telnet server runs on customized port.... (6 Replies)
Discussion started by: zing_foru
6 Replies

9. Shell Programming and Scripting

To get the ip of the devices connected to a specific port.

H, I want to know the ip of the devices connected to a specific port. Suppose 2 s/m's are connected to port 3092. I want to get the ip of those system's . how do i get it? (1 Reply)
Discussion started by: madhumathikv
1 Replies

10. IP Networking

block telnet to specific port

Hello All I am running redhat linux 7.2 and would like to know how i can block telnetting to a specified port . say for example i would like to block telnet acesses to port 80. regards Xiamin (5 Replies)
Discussion started by: xiamin
5 Replies
Login or Register to Ask a Question