From owner-freebsd-questions@FreeBSD.ORG  Mon Feb  9 13:19:31 2009
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 346831065675
	for <freebsd-questions@freebsd.org>;
	Mon,  9 Feb 2009 13:19:31 +0000 (UTC)
	(envelope-from omerfsen@gmail.com)
Received: from mail-bw0-f163.google.com (mail-bw0-f163.google.com
	[209.85.218.163])
	by mx1.freebsd.org (Postfix) with ESMTP id ACE2F8FC17
	for <freebsd-questions@freebsd.org>;
	Mon,  9 Feb 2009 13:19:30 +0000 (UTC)
	(envelope-from omerfsen@gmail.com)
Received: by bwz7 with SMTP id 7so1460127bwz.19
	for <freebsd-questions@freebsd.org>;
	Mon, 09 Feb 2009 05:19:29 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma;
	h=domainkey-signature:mime-version:received:date:message-id:subject
	:from:to:content-type:content-transfer-encoding;
	bh=N8u6o3F9/u0wJFFqhEDs/Z/fECpl3pVj70ye0M1BtcY=;
	b=raUq2NT9qYXt89U/Z6kG3BsswGVcXu81Zo886LjJNJEqvG5RQU6++4pcNRRHmxrkNU
	74EYxaFScknRw5iEgv0Nzjp8UDsfPAOuf48zwYXs6VbGjo8zz5MWNb06iMmRb3QBjYvV
	AF+uLq9l/J0dQp2MV87bHANs3HpmAluvt8ef4=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
	h=mime-version:date:message-id:subject:from:to:content-type
	:content-transfer-encoding;
	b=OZxFG+Yh8ifAFpNxIA8QJjV1G6YJLVVR9P0n0+ueTbREq7zwZ+ouSuZ035xMfId8x2
	OIsxuHOzJGIv3DqLtMonXa5vTDq68DocqpXafoit3i6s9Vyd7ruSJj/HHgYa3kH1Zxml
	gkwgKwN3fbKg0piuNb5xU+qLTdcnaZDKSPmD0=
MIME-Version: 1.0
Received: by 10.181.139.4 with SMTP id r4mr1271087bkn.89.1234185569602; Mon, 
	09 Feb 2009 05:19:29 -0800 (PST)
Date: Mon, 9 Feb 2009 15:19:29 +0200
Message-ID: <75a268720902090519w56e90b25hfa629bd194b65619@mail.gmail.com>
From: Omer Faruk Sen <omerfsen@gmail.com>
To: freebsd-questions@freebsd.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Subject: auditdonly works for console
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Feb 2009 13:19:31 -0000

Hi,

I have tested audit subsystem with FreeBSD 7.1. But the weird thing is
that I only get commands that are executed on console not the ones
that are executed through ssh. Am I missing something here?
I have followed these steps:
http://www.freebsd.org/doc/en/books/handbook/audit-install.html

Regards.