Re: commandlogging
Hi. Install acct-*.deb, then you can start accounting with # accton /var/log/pacct sa shows statistics pr day/month ... # sa -m | cut -c 1-10,37- kfh 560 5937.27re 1.56cp 0avio 350k user cmdclock-time cpu i/o mem Another one to try.. lastcom [user] [command] Accounting is not audit. You will see the command only (and statistics) no arguments. Kristian Høgh. Izak Burger wrote: I think you're thinking about BSD process accounting. It provides a way to tell the kernel to write process information to a file. I have never worked with it before, but now you have a bit more to go on :) regards, Izak Burger On Mon, 5 Mar 2001, Miguel Ángel Varó Giner wrote: Niklas Höglund wrote: Hi! I've heard that there is an kernelmodule that logs all commands executed on a machine. Anyone know where to find it? Or maybe someone has some other idea, how to log all commands exec...? -- //Regards, Niklas Höglund echo 'Win CE, Win ME, Win NT' | sed 's/.in//g;s/,//g;s/ //g' -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] You can see all commands executed using 'lastcomm' (in the 'acct' package). -- Miguel Ángel Varó http://www.dlsi.ua.es/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Izak Burger ([EMAIL PROTECTED]) http://www.linuxuser.co.za/ Tel. +27 21 808 4863 =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Every time Microsoft use the word smart, look out for something dumb. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: promiscuous eth0
Hi Jeff. My pcmcia netcard also don't work when i switch on my laptop. When i type ifconfig it prints: UP BROADCAST RUNNING then I enable multicast (ifconfig eth0 multicast) It works and ifconfig prints UP BROADCAST RUNNING MULTICAST Kristian F. Hgh. Jeff Coppock wrote: I recently install snort on my laptop to check it out and now my pcmcia network card will pass IP only when snort is running (daemon mode or not), or I have to put my network card in promiscuous mode [#ifconfig eth0 -promisc]. I can't find any configuration that is obvious to me that would cause this, but I'm an intermediate linux user. Any suggestions on where to look and what to look for? Also, are what problems might using promiscuous mode cause? thanks, jc -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: promiscuous eth0
Hi Jeff. My pcmcia netcard also don't work when i switch on my laptop. When i type ifconfig it prints: UP BROADCAST RUNNING then I enable multicast (ifconfig eth0 multicast) It works and ifconfig prints UP BROADCAST RUNNING MULTICAST Kristian F. Høgh. Jeff Coppock wrote: I recently install snort on my laptop to check it out and now my pcmcia network card will pass IP only when snort is running (daemon mode or not), or I have to put my network card in promiscuous mode [#ifconfig eth0 -promisc]. I can't find any configuration that is obvious to me that would cause this, but I'm an intermediate linux user. Any suggestions on where to look and what to look for? Also, are what problems might using promiscuous mode cause? thanks, jc -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
