Re: Paranoid Admin: Keystroke Logger for Debian
On Wed, Oct 01, 2003 at 09:46:23AM -0500, DePriest, Jason R. wrote:
> > -----Original Message-----
> > From: ListDude1 [mailto:listdude1@applied-linux.com]
> > Sent: Tuesday, September 30, 2003 6:21 PM
> > To: debian-user@lists.debian.org
> > Subject: Paranoid Admin: Keystroke Logger for Debian
> >
> >
> > Hey all, I was just wondering if there is a keystroke logger
> > avaialble for
> > Debian. I'm the administrator of a very secure machine.
>
> Take a look at snoopy
> (http://packages.debian.org/stable/admin/snoopy.html)
>
> Package: snoopy 1.3-3
> An execve() wrapper and logger
>
> snoopy is merely a shared library that is used as a wrapper to the
> execve() function provided by libc as to log every call to syslog
> (authpriv). system administrators may find snoopy useful in tasks such
> as light/heavy system monitoring, tracking other administrator's actions
> as well as getting a good 'feel' of what's going on in the system (for
> example apache running cgi scripts).
ttysnoop is another potentially useful package for this, but you have to
tell it what tty's to watch.
--
Michael Heironimus
Reply to: