04-03-2006
Quote:
Is there any way I can track the commands run by users from the shell prompt?
Yeah, there is a way to do that: convert your system into 'trusted' one, look at man pages for bsmconv and google about how it works, there is also a good and funny tool called ttysnoop (if im not mistaken) which sniff/display user command in realtime ... but never tried both
Or
hack the shell ... well if u dare
10 More Discussions You Might Find Interesting
1. UNIX for Advanced & Expert Users
Hi,
we are using solaris8. we have some files disappear. I would like to know how to track who and when the files was remove ???
thanks, (7 Replies)
Discussion started by: xitrum
7 Replies
2. UNIX for Advanced & Expert Users
dear all,
I'm facing problem that is i have noticed from few days back that some body is deleting and making changes in the file from developement server where i'm working(in unix)
so i want to track that who is using the server, what performancr they are doing and each every thing which r... (5 Replies)
Discussion started by: panknil
5 Replies
3. UNIX for Advanced & Expert Users
Is there a way to track down what process is sending to a certain port? I have some thing pounding the network with requests to a multicast IP that doesn't exist. I have shut down all comms related processes and yet it is still there. Need a way to track the port or IP back to the process. Thanks... (3 Replies)
Discussion started by: mattmanuel
3 Replies
4. Shell Programming and Scripting
I have written a script which checks server load and emails me.
I am running into the error:
./load_alert.sh: line 8: ; then
printf "WARNING - cpu load high in xyz server"
fi (2 Replies)
Discussion started by: vsmurali
2 Replies
5. UNIX for Dummies Questions & Answers
Hi everyone hope you can help me
i have 5 root users and the problem with that is how can you see
witch root user did what on the box how can you track the users that
played on the servers.
1) What commands they typed (in linux you get history )
2) From witch ip did they connect to the server (3 Replies)
Discussion started by: sucram
3 Replies
6. IP Networking
hi,
i'm using tcpreplay to send a traffic trace to my wireless interface (the trace is been captured by the same interface). It seems as netfilter can't trace connections. Is it possible? (0 Replies)
Discussion started by: littleboyblu
0 Replies
7. AIX
Hi All
How can track what commands are entered by the Root user. Is there a log besides using the history command that lists all commands entered for a period of time.
thanks:o (6 Replies)
Discussion started by: pashan
6 Replies
8. Red Hat
I've tried to see what I can find on my own but I'm coming up with goose eggs. Basically I was wondering if there was a way of querying the scheduler (or something similar) to track a process back to a particular CPU it's executing on at the time of the command. ps has a "cpu" output option but... (1 Reply)
Discussion started by: thmnetwork
1 Replies
9. Shell Programming and Scripting
Hello folks,
I am tracking a process httpd only. But when i am grepping it, it is returning me multiple process of httpd, second it is showing another process of monitorix-httpd. Below commands i have tried.
Current output
# ps ax |grep http
929 ? Ss 0:00 monitorix-httpd... (5 Replies)
Discussion started by: learnbash
5 Replies
10. Shell Programming and Scripting
Hi folks,
I have the basic query that there are 3 unix boxes having their individual access now in my team there are 4 members who are using the same credentials to access those 3 boxes through putty ssh from their windows desktop , now if i want to check which 4 members have executed the... (1 Reply)
Discussion started by: punpun66
1 Replies
LEARN ABOUT ULTRIX
binmail
binmail(1) General Commands Manual binmail(1)
Name
binmail - send or receive mail among users
Syntax
/bin/mail [+] [-i] [person...]
/bin/mail [+] [-i] -f file
Description
This is the old version 7 UNIX system mail program. The default command is described in and its binary is in the directory The program is
still used to actually deliver a mail message into the users system-wide mailbox ( ), however, the reading of these messages has been
replaced with the program Do not remove from your system.
The command with no argument prints a user's mail, message-by-message, in last-in, first-out order; the optional argument + displays the
mail messages in first-in, first-out order. For each message, it reads a line from the standard input to direct the disposition of the
message.
Issue the following commands from the program prompt:
<CR> Go on to next message
d Delete message and go on to the next.
p Print message again.
- Go back to previous message.
s [file...] Save the message in the named files (`mbox' default).
w [file...] Save the message, without a header, in the named files (`mbox' default).
m [person...] Mail the message to the named persons (yourself is default).
EOT (control-D) Put unexamined mail back in the mailbox and stop.
q Same as EOT.
!command Escape to the Shell to do command.
* Print a command summary.
An interrupt normally terminates the command; the mail file is unchanged.
When persons are named, takes the standard input up to an end-of-file (or a line with just `.') and adds it to each person's mail file.
The message is preceded by the sender's name and a postmark. Lines that look like postmarks are prepended with `>'. A person is usually a
user name recognized by To denote a recipient on a remote system, prefix person by the system name and exclamation mark. For further
information, see
The program sends a message to the screen that there is mail when the user logs in.
When is used to deliver mail, (usually calls to do this), a mailbox is created for the user in the directory if it doesn't already exist.
The mailbox is created with the mode 700 so that only its owner can access it. In addition, the directory has the mode 777 with the sticky
bit set. The mode is 777 so that other mail programs, notably can create the appropriate lock files to prevent another process from writ-
ing to the mailbox at the same time. The sticky bit set on the directory prevents one user from unlinking another user's mailbox.
Options
-f Displays mail messages contained in the specified file (next argument) in place of your mailbox file.
-i Notifies mail to continue after interrupts.
Restrictions
Race conditions sometimes result in a failure to remove a lock file.
Files
/etc/passwd to identify sender and locate persons
/usr/spool/mail/* incoming mail for user *
mbox saved mail
/tmp/ma* temp file
/usr/spool/mail/*.lock lock for mail directory
dead.letter unmailable text
See Also
mail(1), uucp(1c), uux(1c), write(1), sendmail(8)
binmail(1)