Re: commandlogging
Hi.
Install acct-*.deb, then you can start accounting with
# accton /var/log/pacct
sa shows statistics pr day/month ...
# sa -m | cut -c 1-10,37-
kfh 560 5937.27re 1.56cp 0avio 350k
user cmd clock-time cpu i/o mem
Another one to try..
lastcom [user] [command]
Accounting is not audit. You will see the command only (and statistics) no
arguments.
Kristian Høgh.
Izak Burger wrote:
> I think you're thinking about BSD process accounting. It provides a way
> to tell the kernel to write process information to a file. I have never
> worked with it before, but now you have a bit more to go on :)
>
> regards,
> Izak Burger
>
> On Mon, 5 Mar 2001, Miguel Ángel Varó Giner wrote:
>
> > Niklas Höglund wrote:
> > >
> > > Hi!
> > > I've heard that there is an kernelmodule that logs all commands executed
> > > on a machine. Anyone know where to find it?
> > >
> > > Or maybe someone has some other idea, how to log all commands exec...?
> > >
> > > --
> > > //Regards,
> > > Niklas Höglund
> > > echo 'Win CE, Win ME, Win NT' | sed 's/.in//g;s/,//g;s/ //g'
> > >
> > > --
> > > To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> > > with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> >
> > You can see all commands executed using 'lastcomm' (in the 'acct' package).
> >
> > --
> > Miguel Ángel Varó
> > http://www.dlsi.ua.es/
> >
> >
> > --
> > To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> > with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> >
> >
>
> --
> =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
> Izak Burger (gpf@linuxuser.co.za)
> http://www.linuxuser.co.za/
> Tel. +27 21 808 4863
> =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
> Every time Microsoft use the word "smart," look out for something dumb.
>
> --
> To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: