Re: How to log user activity?
From: Gandalf Parker (gandalf_at_most.of.my.favorite.sites)
Date: Sun, 27 Feb 2005 18:47:21 GMT
Gareth Bromley <firstname.lastname@example.org> wrote in
> exquisitus wrote:
>> I am about to allow external users to log onto my dev machine,
>> accross the internet. I would like to log their activities so that I
>> can perform an audit trail. Anyone knows how to do this/or a
>> utility/script that allows me to do this?
> Take a look at Sebek http://project.honeynet.org/tools/sebek/
> Unlike some host specific solutions like LD_PRELOAD's or process
> accounting this tool captures activity and passes it to a server for
> recording and analysis, so the ability for the attacker to wipe the
> evidence/log files is less likely.
THATS the one I was trying to remember. Thanks.