UNIX for Advanced & Expert Users

Hi Friends,

We are currently 5 people using same Unix login-id on different terminals, .sh_history file contains list of commands typed by all 5 peoples(commands history) with the below list :

$tail .sh_history

ls -ltr
pwd
cd ..
ls -ltr
clear
cd temp
more kk.lst

Now my question is " Can I get the IP address of the terminal for each command in .sh_history file or is there any other to find out the ip address for each command typed ??? "

Appreciate for your early reply.

Thanks
Krishna

i believe that there are command logging utilities out there, try a search on google. i dont think its possible with sh history to find out at which tty even the command was entered.

You really need to use one id per user. Then you know which user did which command. At that point, since you know the user's id, you should not need the user's ip address. But many unix systems do have some way to show the user's remote ip address at login time. This would often be kept in a file called wtmp (or wtmpx).

Thanks for your reply, but the file wtmp (or wtmpx) is not in readable format !!! is there any alternative solution, but we strictly use the same login-id for 5 people(dept. login-id).

You will have some programs that can display wtmp for you. I don't know which version of unix you are using, so I'm not sure what to recommend. But try this:

who -a /path/to/wtmp

Also you may have fwtmp, but it may in /usr/lib somewhere. Try "man fwtmp".

you may have the 'last' command which gives a sometimes brief, or long (depending on the system) list of logins including origin of login and date and time.

Add this to the .profile in question. It is what my company uses for those who have root access.

Code:

#############
# sets .sh_hist file to id of user
if [ "`tty`" = "/dev/console" ]
then
        REAL=console
else
        REAL=`logname`
fi

HISTFILE=$HOME/.sh_$REAL
export HISTFILE
HISTSIZE=1000; export HISTSIZE

i think that is all the code. Each time a different person logs in, this will create a .sh_user1 history file.

added code tags for readability --oombera