04-03-2006
Command Tracking
Hi,
OS: Solaris9, SPARC
Is there any way I can track the commands run by users from the shell prompt?
Example:
Somebody is deleting files from the system. Who it is is a mystery. That person obviously does not use bash prompt so there is no history. Is there anyway I can find out who is doing it by recording the user commands some where. Is this already done in Solaris?
Regd,
M...
10 More Discussions You Might Find Interesting
1. UNIX for Advanced & Expert Users
Hi,
we are using solaris8. we have some files disappear. I would like to know how to track who and when the files was remove ???
thanks, (7 Replies)
Discussion started by: xitrum
7 Replies
2. UNIX for Advanced & Expert Users
dear all,
I'm facing problem that is i have noticed from few days back that some body is deleting and making changes in the file from developement server where i'm working(in unix)
so i want to track that who is using the server, what performancr they are doing and each every thing which r... (5 Replies)
Discussion started by: panknil
5 Replies
3. UNIX for Advanced & Expert Users
Is there a way to track down what process is sending to a certain port? I have some thing pounding the network with requests to a multicast IP that doesn't exist. I have shut down all comms related processes and yet it is still there. Need a way to track the port or IP back to the process. Thanks... (3 Replies)
Discussion started by: mattmanuel
3 Replies
4. Shell Programming and Scripting
I have written a script which checks server load and emails me.
I am running into the error:
./load_alert.sh: line 8: ; then
printf "WARNING - cpu load high in xyz server"
fi (2 Replies)
Discussion started by: vsmurali
2 Replies
5. UNIX for Dummies Questions & Answers
Hi everyone hope you can help me
i have 5 root users and the problem with that is how can you see
witch root user did what on the box how can you track the users that
played on the servers.
1) What commands they typed (in linux you get history )
2) From witch ip did they connect to the server (3 Replies)
Discussion started by: sucram
3 Replies
6. IP Networking
hi,
i'm using tcpreplay to send a traffic trace to my wireless interface (the trace is been captured by the same interface). It seems as netfilter can't trace connections. Is it possible? (0 Replies)
Discussion started by: littleboyblu
0 Replies
7. AIX
Hi All
How can track what commands are entered by the Root user. Is there a log besides using the history command that lists all commands entered for a period of time.
thanks:o (6 Replies)
Discussion started by: pashan
6 Replies
8. Red Hat
I've tried to see what I can find on my own but I'm coming up with goose eggs. Basically I was wondering if there was a way of querying the scheduler (or something similar) to track a process back to a particular CPU it's executing on at the time of the command. ps has a "cpu" output option but... (1 Reply)
Discussion started by: thmnetwork
1 Replies
9. Shell Programming and Scripting
Hello folks,
I am tracking a process httpd only. But when i am grepping it, it is returning me multiple process of httpd, second it is showing another process of monitorix-httpd. Below commands i have tried.
Current output
# ps ax |grep http
929 ? Ss 0:00 monitorix-httpd... (5 Replies)
Discussion started by: learnbash
5 Replies
10. Shell Programming and Scripting
Hi folks,
I have the basic query that there are 3 unix boxes having their individual access now in my team there are 4 members who are using the same credentials to access those 3 boxes through putty ssh from their windows desktop , now if i want to check which 4 members have executed the... (1 Reply)
Discussion started by: punpun66
1 Replies
msh(1mh) msh(1mh)
Name
msh - MH shell
Syntax
msh [ -help ] [ -prompt string ] [ file ]
Description
The command is an interactive program that implements a subset of the normal MH commands operating on a single file in format. That is, is
used to read a file that contains a number of messages, as opposed to the standard MH style of reading a number of files, each file being a
separate message in a folder.
The chief advantage of is that, unlike the normal MH style, it allows a file to have more than one message in it. In addition, can be used
on other files, such as message archives which have been packed using
When invoked, reads the named file, and enters a command loop. You can type most of the normal MH commands. The syntax and semantics of
these commands typed to are identical to their MH counterparts. In cases where the nature of would be inconsistent with the way MH works
(for example, specifying a +folder with some commands), will duly inform you. The commands that currently supports are:
ali burst comp dist folder
forw inc mark mhmail msgchk
next packf pick prev refile
repl rmm scan send show
sortm whatnow whom
In addition, has a command which gives a brief overview of all the options. To terminate either type <CTRL/D>, or use the command. If the
file is writable and has been modified, then using will ask you if the file should be updated.
A redirection facility is supported by Commands may be followed by one of the following standard ULTRIX symbols:
| Open an interprocess channel; connect output to another ULTRIX command.
> Write output to file.
>> Append output to file.
If file starts with a tilde (~), then a C-shell-like expansion takes place. Note that commands are interpreted by
When parsing commands to the left of any redirection symbol, will honor the backslash () as the quote next-character symbol, and double
quotes (") as quote-word delimiters. All other input tokens are separated by white space (spaces and tabs).
You may wish to use an alternative profile for the commands that executes; see for details of the $MH environment variable.
Options
-help Prints a list of the valid options for this command.
-prompt string
Sets the prompt for If the string you specify includes white space, you must enclose it in double quotes ("). If you do not
specify this option, the default prompt is (msh).
The following defaults are used by
file defaults to
-prompt (msh)
Restrictions
The shell is not the C-shell, and a lot of the facilities provided by the latter are not present in the former. In particular, does not
support back-quoting, history substitutions, variable substitutions, or alias substitutions.
does not understand back-quoting. The only effective way to use inside is to always use the -seq select option. If you add the following
line to your will work equally well from both the shell and
pick: -seq select -list
There is a strict limit of messages per file in format which can handle. Usually, this limit is 1000 messages.
Profile Components
Path: To determine your Mail directory
Msg-Protect: To set protections when creating a new file
fileproc: Program to file messages
showproc: Program to show messages
Files
The user profile.
The system customization file.
See Also
csh(1), packf(1mh), sh(1), mh_profile(5mh)
msh(1mh)