Date: Tue, 19 May 1998 16:50:46 +0100 (BST) From: Ben Cohen <bjc23@hermes.cam.ac.uk> To: bsd mailing lists <bsd@righi.df.unibo.it> Cc: THIERRY.HERBELOT@telspace.alcatel.fr, freebsd-questions@FreeBSD.ORG Subject: Re: =?ISO-8859-1?Q?R=E9p_:_sniffit?= Message-ID: <Pine.BSF.3.96.980519164749.655D-100000@bjc23.trin.cam.ac.uk> In-Reply-To: <Pine.BSF.3.96.980519161047.8438A-100000@righi.df.unibo.it>
next in thread | previous in thread | raw e-mail | index | archive | help
> I need to knwow what users are doing > sinec I Suspect for a dangerous user, > so tcpdump is not useful for me You can use the command w to see what commands users are currently running. You can use ps -U<user> to see what processes the user is running. You can use watch /dev/<terminal> to see what is being displayed on that terminal. (But you need to recompile the kernel with pseudo-device snp 1 and then MAKEDEV snp0) Ben. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.980519164749.655D-100000>