[HPADM] trace logins.

From: Kim, Kyeongwon (kkim_at_telcordia.com)
Date: 02/06/04

  • Next message: Miller, Tammy S. (CT): "[HPADM] Help with script"
    To: "'hpux-admin@DutchWorks.nl'" <hpux-admin@DutchWorks.nl>
    Date: Thu, 5 Feb 2004 21:46:31 -0500 
    
    

    Dear Admins:

    First of all, I would like to thank you all for helping me out each time I
    have a problem.
    I have another questiosn to ask. Is there a way to trace what each login
    session(what commands each login id is executing.) is doing besides
    ".sh_history" file. I notice some of the machines that people executes some
    commands and just emptied out the ".sh_history" file. Is there a tools or
    hidden file(maybe) that can be turned on and off to trace each logins..?

    Thank you for help in advance,
    -K.Kim-

    --
                 ---> Please post QUESTIONS and SUMMARIES only!! <---
            To subscribe/unsubscribe to this list, contact majordomo@dutchworks.nl
           Name: hpux-admin@dutchworks.nl     Owner: owner-hpux-admin@dutchworks.nl
     
     Archives:  ftp.dutchworks.nl:/pub/digests/hpux-admin       (FTP, browse only)
                http://www.dutchworks.nl/htbin/hpsysadmin   (Web, browse & search)
    

  • Next message: Miller, Tammy S. (CT): "[HPADM] Help with script"

    Relevant Pages

    • Re: The IListSource does not contain any data sources.
      ... On a working server, the same page comes up after I ... after your login where are you redirected to what page. ... in that page place a break point and trace. ... I am assuming you are getting some data from a database to ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: BSM, SSH, and Session ID
      ... I don't think writing a 'script' to monitor anything at all for that purpose, is going to be ingenius enough to really matter. ... I would use it to track any basic commands like mv, cp, rm, scp, sftp, unlink. ... As long as you allow someone to login and run any arbitrary commands, they have the potential to avoid any logging or tracking you may set up. ... 'exec' events with that session ID and run as root. ...
      (Focus-SUN)
    • Re: [opensuse] mv and cpio have new behavior. How do I get the old back?
      ... What I need is a quick cursory date/time. ... my build account or run the tools. ... detail it is easier to login. ... For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx ...
      (SuSE)
    • Re: [SLE] Login problems
      ... The only way I can login is on the console is as ... > said package telnetd will be installed and then when I clicked ok it ... Then while still in your user account start your GUI by running the ... For additional commands send e-mail to suse-linux-e-help@suse.com ...
      (SuSE)
    • Re: sp_trace_setfilter does not work
      ... I want to only see the activity from my application's login which is why I'm using the login filter. ... Also when I look at the trace file's properties using the profiler gui, there's nothing in the filter section. ... Erland Sommarskog, SQL Server MVP, esquel@xxxxxxxxxxxxx ...
      (microsoft.public.sqlserver.tools)