Solaris

Hi All,

I am in desperate need of a help. Actually , wanted to maintain logs for all the users who ssh to a solaris system and keep track of all the activities they perform. And at the end of the session a mail to be sent to my email id. Can someone plz help.

There are three general solutions:
1. a Program which intercepts the TTY and captures input/output for the session
2. Solaris auditing can give you fine-grained detail about this.
3. an LD_PRELOAD module which intercepts library calls to exec. This is provided by a program called snoopy. Read here for more. It's known to work on Linux and should work with Solaris.

Wireshark , every system conection is logged , but as root you must respect privacy

"dtrace" can do this... but microbot is right, you've to respect the others!

Wireshark can be used to sniff ssh connections?

Yes SSH can be sniffed with wireshark and if you install a good keyloger on network you can get passwords and usernames , but that is illegal action . If you going to sniff using wireshark you just look for http 1,0