04-03-2006
Quote:
Is there any way I can track the commands run by users from the shell prompt?
Yeah, there is a way to do that: convert your system into 'trusted' one, look at man pages for bsmconv and google about how it works, there is also a good and funny tool called ttysnoop (if im not mistaken) which sniff/display user command in realtime ... but never tried both
Or
hack the shell ... well if u dare
10 More Discussions You Might Find Interesting
1. UNIX for Advanced & Expert Users
Hi,
we are using solaris8. we have some files disappear. I would like to know how to track who and when the files was remove ???
thanks, (7 Replies)
Discussion started by: xitrum
7 Replies
2. UNIX for Advanced & Expert Users
dear all,
I'm facing problem that is i have noticed from few days back that some body is deleting and making changes in the file from developement server where i'm working(in unix)
so i want to track that who is using the server, what performancr they are doing and each every thing which r... (5 Replies)
Discussion started by: panknil
5 Replies
3. UNIX for Advanced & Expert Users
Is there a way to track down what process is sending to a certain port? I have some thing pounding the network with requests to a multicast IP that doesn't exist. I have shut down all comms related processes and yet it is still there. Need a way to track the port or IP back to the process. Thanks... (3 Replies)
Discussion started by: mattmanuel
3 Replies
4. Shell Programming and Scripting
I have written a script which checks server load and emails me.
I am running into the error:
./load_alert.sh: line 8: ; then
printf "WARNING - cpu load high in xyz server"
fi (2 Replies)
Discussion started by: vsmurali
2 Replies
5. UNIX for Dummies Questions & Answers
Hi everyone hope you can help me
i have 5 root users and the problem with that is how can you see
witch root user did what on the box how can you track the users that
played on the servers.
1) What commands they typed (in linux you get history )
2) From witch ip did they connect to the server (3 Replies)
Discussion started by: sucram
3 Replies
6. IP Networking
hi,
i'm using tcpreplay to send a traffic trace to my wireless interface (the trace is been captured by the same interface). It seems as netfilter can't trace connections. Is it possible? (0 Replies)
Discussion started by: littleboyblu
0 Replies
7. AIX
Hi All
How can track what commands are entered by the Root user. Is there a log besides using the history command that lists all commands entered for a period of time.
thanks:o (6 Replies)
Discussion started by: pashan
6 Replies
8. Red Hat
I've tried to see what I can find on my own but I'm coming up with goose eggs. Basically I was wondering if there was a way of querying the scheduler (or something similar) to track a process back to a particular CPU it's executing on at the time of the command. ps has a "cpu" output option but... (1 Reply)
Discussion started by: thmnetwork
1 Replies
9. Shell Programming and Scripting
Hello folks,
I am tracking a process httpd only. But when i am grepping it, it is returning me multiple process of httpd, second it is showing another process of monitorix-httpd. Below commands i have tried.
Current output
# ps ax |grep http
929 ? Ss 0:00 monitorix-httpd... (5 Replies)
Discussion started by: learnbash
5 Replies
10. Shell Programming and Scripting
Hi folks,
I have the basic query that there are 3 unix boxes having their individual access now in my team there are 4 members who are using the same credentials to access those 3 boxes through putty ssh from their windows desktop , now if i want to check which 4 members have executed the... (1 Reply)
Discussion started by: punpun66
1 Replies
LEARN ABOUT DEBIAN
pppoe-sniff
PPPOE-SNIFF(8) System Manager's Manual PPPOE-SNIFF(8)
NAME
pppoe-sniff - examine network for non-standard PPPoE frames
SYNOPSIS
pppoe-sniff [options]
DESCRIPTION
pppoe-sniff listens for likely-looking PPPoE PADR and session frames and deduces extra options required for pppoe(8) to work.
Some DSL providers seem to use non-standard frame types for PPPoE frames, and/or require a certain value in the Service-Name field. It is
often easier to sniff those values from a machine which can successfully connect rather than try to pry them out of the DSL provider.
To use pppoe-sniff, you need two computers, a DSL modem and an Ethernet hub (not an Ethernet switch.)
If the DSL modem normally connects directly to your computer's Ethernet card, connect it to the "uplink" port on the Ethernet hub. Plug
two computers into normal ports on the hub. On one computer, run whatever software the DSL provider gave you on whatever operating system
the DSL provider supports. On the other computer, run Linux and log in as root.
On the Linux machine, put the Ethernet interface into promiscuous mode and start pppoe-sniff. If the ethernet interface is eth0, for exam-
ple, type these commands:
ifconfig eth0 promisc
pppoe-sniff -I eth0
On the other machine, start your DSL connection as usual. After a short time, pppoe-sniff should print recommendations for the value of
PPPOE_EXTRA. Set this value in /etc/ppp/pppoe.conf. If pppoe-sniff indicates that something special is required in PPPOE_EXTRA, please e-
mail this to pppoe@roaringpenguin.com along with the name of your ISP and the manufacturer and model number of your DSL modem. This infor-
mation will be collated and provided on the PPPoE web page for users who do not have two computers.
After pppoe-sniff finishes (or you stop it if it seems hung), remember to turn off promiscuous mode:
ifconfig eth0 -promisc
OPTIONS
-I interface
The -I option specifies the Ethernet interface to use. Under Linux, it is typically eth0 or eth1. The interface should be "up" and
in promiscuous mode before you start pppoe-sniff.
-V The -V option causes pppoe-sniff to print its version number and exit.
BUGS
pppoe-sniff only works on Linux.
AUTHORS
pppoe-sniff was written by David F. Skoll <dfs@roaringpenguin.com>.
The pppoe home page is http://www.roaringpenguin.com/pppoe/.
SEE ALSO
pppd(8), pppoe(8), pppoe-sniff(8), pppoe-relay(8), /usr/share/doc/pppoe/README.Debian.gz
4th Berkeley Distribution 3 July 2000 PPPOE-SNIFF(8)