Monitor User Activity !!!

Monitor User Activity !!!

Post by sanjay1.. » Thu, 20 Jul 2000 04:00:00



Hi,

Is there a way to know what a user was doing from login to logout ? For
example what all files he read, which all directories he accessed, what
all system and user programs or commands he executed.

If it is possible to monitor all or some of the activities mentioned
above. How can it be done ? What are the utilities and/or commands to be
used to check this ?

Your answers or suggestions are highly appreciated.

Thank You.

Sanjay.

Sent via Deja.com http://www.deja.com/
Before you buy.

 
 
 

Monitor User Activity !!!

Post by Oleg Tipiso » Thu, 20 Jul 2000 04:00:00



> Hi,

> Is there a way to know what a user was doing from login to logout ? For
> example what all files he read, which all directories he accessed, what
> all system and user programs or commands he executed.

> If it is possible to monitor all or some of the activities mentioned
> above. How can it be done ? What are the utilities and/or commands to be
> used to check this ?

man -k accounting

Quote:> Your answers or suggestions are highly appreciated.

> Thank You.

> Sanjay.

> Sent via Deja.com http://www.deja.com/
> Before you buy.

Oleg Tipisov,
REDCENTER,
Moscow

 
 
 

Monitor User Activity !!!

Post by Martin Hepwort » Thu, 20 Jul 2000 04:00:00



> Hi,

> Is there a way to know what a user was doing from login to logout ? For
> example what all files he read, which all directories he accessed, what
> all system and user programs or commands he executed.

> If it is possible to monitor all or some of the activities mentioned
> above. How can it be done ? What are the utilities and/or commands to be
> used to check this ?

> Your answers or suggestions are highly appreciated.

> Thank You.

> Sanjay.

> Sent via Deja.com http://www.deja.com/
> Before you buy.

SeOS from memco (now part of the CA's platinum product line) could do
this. Check with your local Computer Associates office.

Martin

 
 
 

Monitor User Activity !!!

Post by Randy Styk » Thu, 20 Jul 2000 04:00:00



> Hi,

> Is there a way to know what a user was doing from login to logout ? For
> example what all files he read, which all directories he accessed, what
> all system and user programs or commands he executed.

> If it is possible to monitor all or some of the activities mentioned
> above. How can it be done ? What are the utilities and/or commands to be
> used to check this ?

Accounting will tell you a lot at the file level.  If you
want to actually "see" what they are doing, there are products
for this.  Our company wrote/sells ;-) a product called PEEK
that lets you see what someone is doing and lets you type on
their behalf (handy for remote support, trouble shooting,

or visit www.computron.com/ne  Thanks!
--
+-----------------------------------------------------------------+

| 4N165 Wood Dale Road           Phone:  630/941-7767             |
| Addison, Illinois  60101 USA   Fax:    630/941-7714             |
+-----------------------------------------------------------------+
 
 
 

Monitor User Activity !!!

Post by hemantsha.. » Thu, 20 Jul 2000 04:00:00


Hi
ksh and bash maintains a history file by the name of .sh_history in the
user home dir.
whatever command user types it goes in to this file .You can fix user
shell as ksh . For login time you can echo 'date' and append to
the .sh_history file -- in the user .profile file.

Hemant Sharma
http://www.adminschoice.com



> Hi,

> Is there a way to know what a user was doing from login to logout ?
For
> example what all files he read, which all directories he accessed,
what
> all system and user programs or commands he executed.

> If it is possible to monitor all or some of the activities mentioned
> above. How can it be done ? What are the utilities and/or commands to
be
> used to check this ?

> Your answers or suggestions are highly appreciated.

> Thank You.

> Sanjay.

> Sent via Deja.com http://www.deja.com/
> Before you buy.

Sent via Deja.com http://www.deja.com/
Before you buy.
 
 
 

Monitor User Activity !!!

Post by Pavel Svik » Fri, 21 Jul 2000 04:00:00


Check out the accounting features of your system (see at
http://docs.sun.com/ for Sun Solaris). These should enable you to monitor
at least the commands ran by your users and the times of their
logins/logouts. Even a FS accounting is partly possible.

Pavel Svika.

Quote:>>>>>>>>>>>>>>>>>> Original Message <<<<<<<<<<<<<<<<<<


User Activity !!!:
Quote:> Hi,
> Is there a way to know what a user was doing from login to logout ? For
> example what all files he read, which all directories he accessed, what
> all system and user programs or commands he executed.
> If it is possible to monitor all or some of the activities mentioned
> above. How can it be done ? What are the utilities and/or commands to be
> used to check this ?
> Your answers or suggestions are highly appreciated.
> Thank You.
> Sanjay.
> Sent via Deja.com http://www.deja.com/
> Before you buy.

 
 
 

1. Newbie question: Security and monitoring user activity

Hi all,

I am new to system administration (I changed careers after 10 years on the
same job) and; therefore, don't know most of the UNIX guru tricks.  Here's
my problem: we recently hired a coop student to do a variety of tasks
including some programming assignments.  After just a few days on the job
I realized he was trying to modify files (passwd, aliases, etc.) he
shouldn't be trying to modify and he has been trying to gain root access.
I have been trying to monitor his activities by viewing his .sh_history
file, looking in log files, etc.  However, he knows I have been checking
up on him and he is good at covering up his tracks.  One thing I realized
he has been doing is switching from ksh, his initial shell, to csh.  This
makes it difficult to know what he has been doing.  Any suggestions for
keeping a better eye on this guy?  Thanks for any help.

Leo Crombach


2. Which Linux?

3. Need to monitor user activity from another X-terminal

4. Redhat cannot connect to the internet

5. Question:How to monitor samba user activities?

6. How to turn on vsync blank on SPARCs?

7. monitoring users' activities?

8. Missing file?

9. Netowrk activity with no activity?

10. How to monitor network activity ?

11. tools for monitoring network activities & traffics

12. Real-time port 80 activity monitor, using graphs in console mode?

13. Monitoring tape activity