UNIX for Advanced & Expert Users

Can anyone point me to a shareware/freeware keylogger software for unix for admin monitoring purposes on our central servers?

thanks,
Sam

this comes very close to a hacking question...

can you give us more infomation as to what the problem is that you are trying to solve?

why do you need loggin of every keystroke?

I want to log all sessions to the central server for auditing and security. Privacy is not an issue here as it is central server and there are few admins.

It isn't a key logger but you could setup history files and copy those to a centralized server. History files save all the commands users run. You can setup the "HISTFILE" variable in your /etc/profile so every user gets the same format. We have ours setup similar to this:

Code:

WHO2=$(/usr/bin/who -m | cut -d\( -f2 | cut -d\) -f1 | sed 's/\./_/g')
HISTFILE=$HOME/.history/.history.${WHO2}.$(date +%Y%m%d.%H%M%S).$$.${LOGNAME}

This format lets me know who the user logged into the machine as ("WHO2"), who the commands were run as ("LOGNAME"), and the date/time they logged into the box. This has proven useful to us many times over.

The 'script' command can be used for these solutions (monitoring admin sessions), see ISBN:0-471-21821-9 "Mastering Unix Shell Scripting" chapter 19.

solaris for example has a buildin auditing function! i don't know about the others...

check out sudosh

saves session input and output, replays the session in realtime, or faster when you want

looks like

Code:

second
ls-ltra 
command not found
backspace backspace backspace backspace backspace
ls -ltrs
backspace
ls -ltra

or something like that

funny thing