I found snoopy to be very helpful (and packaged in Debian). Example log: Oct 29 10:57:05 onix snoopy[23669]: [arodrigo, uid:0 sid:15246]: ls -F -p -N --color=auto Oct 29 10:57:49 onix snoopy[23688]: [arodrigo, uid:0 sid:15246]: cat /var/log/control Oct 29 10:57:49 onix snoopy[23690]: [(null), uid:0 sid:15246]: grep arodrigo
I am sorry I can't come up with a better output example :-) -- I don't think you trust in my self-righteous suicide ._System Of A Down_-_Chop Suey_.