Re: Paranoid Admin: Keystroke Logger for Debian
On Wed, Oct 01, 2003 at 09:46:23AM -0500, DePriest, Jason R. wrote:
> > -----Original Message-----
> > From: ListDude1 [mailto:firstname.lastname@example.org]
> > Sent: Tuesday, September 30, 2003 6:21 PM
> > To: email@example.com
> > Subject: Paranoid Admin: Keystroke Logger for Debian
> > Hey all, I was just wondering if there is a keystroke logger
> > avaialble for
> > Debian. I'm the administrator of a very secure machine.
> Take a look at snoopy
> Package: snoopy 1.3-3
> An execve() wrapper and logger
> snoopy is merely a shared library that is used as a wrapper to the
> execve() function provided by libc as to log every call to syslog
> (authpriv). system administrators may find snoopy useful in tasks such
> as light/heavy system monitoring, tracking other administrator's actions
> as well as getting a good 'feel' of what's going on in the system (for
> example apache running cgi scripts).
ttysnoop is another potentially useful package for this, but you have to
tell it what tty's to watch.