Security Basics mailing list archives

Re: Auditing / Logging


From: Frank Knobbe <frank () knobbe us>
Date: Tue, 13 Jan 2004 11:16:30 -0600

On Mon, 2004-01-12 at 17:17, Don Parker wrote:
Well, you raise a valid point as to the commands not being logged. 
Again I would prefer simplicity, so just install a keylogger. There
is no need to overcomplicate things. Though a keylogger will not work 
on most *nix systems to my knowledge.

Don't even have to do that. Have you never heard of a 'snoop' device?
You can just snoop/watch the tty session you are using for your tests
and redirect it to a file.

On BSD systems you can use: watch -o ttyXX > logfile

Cheers,
Frank

Attachment: signature.asc
Description: This is a digitally signed message part


Current thread: