TTYSNOOP de nuevo
tengo ttysnoop instalado y tengo un servidor telnet y ssh instalado y lo ke kiero koncretamente es poner a ttysnoop en ves de login y quiero saber si les indico a telnet y ssh que el programa login es ttysnoop y me logueo no hay problema con eso de las ttyS tty1 que si tty7 por favor ayudenme soy nuevo en linux -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
ttysnoop
Hola todos, en realidad no entiendo como confugurar ttysnoop, este programa no entiendo eso de las ttyS0 que si tty7, for favor ayudenme les agradesco que me expliquen :D -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: ttysnoop
/usr/doc/ttynsoop o en su defecto pregunta algo más concreto. Tienes que indicarle al daemon telnetd que lo lanzas con soporte ttysnoop -L ttysnoop. Aunque te advierto q yo tuve que compilar el paquete porque el de debian no lo logré rular. Te aconsejo que te lo bajes, lo compiles y mires un poco las fuentes a ver como trabaja. Un saludo. Diego. - Original Message - From: [EMAIL PROTECTED] To: debian-user-spanish@lists.debian.org Sent: Thursday, May 09, 2002 7:30 AM Subject: ttysnoop Hola todos, en realidad no entiendo como confugurar ttysnoop, este programa no entiendo eso de las ttyS0 que si tty7, for favor ayudenme les agradesco que me expliquen :D -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: ttysnoop
On Thu, May 09, 2002 at 01:30:33AM -0400, [EMAIL PROTECTED] wrote: Hola todos, en realidad no entiendo como confugurar ttysnoop, este programa no entiendo eso de las ttyS0 que si tty7, for favor ayudenme les agradesco que me expliquen :D Básicamente lo que hace ttysnoop es ponerse en lugar de /bin/login, hace todo lo que login hace pero además tiene la capacidad de clonar un terminal en otro, o sea, en otro terminal se puede ver todo lo que tipea el usuario cuyo terminal está siendo snoopeado, y también se puede hacer el truco de The Matrix y escribir remotamente en dicho terminal. ttyS0, tty7, etc, son nombres de terminales. Los que tienen una S me parece que denominan los terminales seriales. Los ttyN son consolas virtuales y etc, en realidad no conozco bien la convención. Lo que se hace para que todo camine es reemplazar el programa /bin/login por /usr/sbin/ttysnoops donde corresponda. Por ejemplo si quieres espiar los telnets tienes que llamar a telnetd (en /etc/inetd.conf generalmente), con la opción -L /usr/sbin/ttysnoop. Siquieres interceptar terminales seriales o consolas virtuales tienes que meter mano en /etc/mgetty/login.config. Hay varias opciones que se pueden poner en el archivo de configuración /etc/snooptable, que viene bien comentado. RTFM para más información. Blu. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
ttysnoop
Hola, estoy buscando la forma de logar en ficheros ordenados, todos los comandos que ejecuta un usuario desde una shell, ademas necesito que siga logando si hace un su - root.. Seria fantastico que logase tambien la salida de estos comandos, algo como el ttysnoop, pero me gustaria que fuera portable a solaris y Aix, ademas de funcionar para linux. Si alguien conoce algun producto/cachupa que solvente este problema.. estaria muy agradecido. Saludos y gracias de antemano. == Kenneth Modrego Pechero SBD Consultors DNET - Web Server Middleware Sistemas Internet Banco Sabadell Tel: 93.728.2440 E-mail: [EMAIL PROTECTED] ==
ttysnoop w/ win98 ptmx
Has anybody gotten ttysnoop to work w/ Unix98 PTYs ? __ PGP fingerprint = 03 5B 9B A0 16 33 91 2F A5 77 BC EE 43 71 98 D4 [EMAIL PROTECTED] / http://www.op.net/~darxus Find the next largest prime, be famous: http://www.mersenne.org/prime.htm
Re: ttysnoop
Ben Lutgens wrote: I am trying to configure ttysnoop. Whenever i try to login with telnet I get: [snip] Sorry, not an answer to your question, but a question of my own to do with ttysnoop (or any other suitable software): Would it be possible to log _all_ telnet traffic (including usernames and times) to a file, rather than simply creating a ``clone'' of the display? Using .bash_history would be somewhat awkward and unreliable. It would be excellent if I could log all insecure telnet traffic, partly as an incentive for my users to use SSH and partly because there are a lot of 16 year-old students around. Please just send a private e-mail if this is a case of not RTFMing :-) Ciao, Kris, who has a sneaky feeling he shouldn't have asked... -- Kris | [EMAIL PROTECTED] If you quote this .sig then I hope you get hiccups
Re: ttysnoop
On Thu, Oct 21, 1999 at 12:16:53AM +0100, Kris wrote: It would be excellent if I could log all insecure telnet traffic, partly as an incentive for my users to use SSH and partly because there are a lot of 16 year-old students around. Please just send a private e-mail if this is a case of not RTFMing :-) Aside from a proprietary application (of which I do not know of) you could always use the a shell script and the comman script but I am unsure how you would differentiate between ssh and telnet If you want people to use ssh add something to your /etc/issue stating in x number of days/weeks telnet will not be available; and any users wishing shell access need to obtain and install ssh. Then have them request shell access. This way you could control who has shell access by adding thier host to ssh.allow (Or whatever the file is) Ben
ttysnoop
I am trying to configure ttysnoop. Whenever i try to login with telnet I get: Escape character is '^]'. Debian GNU/Linux potato cybercreep can't bind server socket (/var/spool/ttysnoop/ttyp0) Connection closed by foreign host. the entry in my inetd.conf for telent is telnet stream tcp nowait telnetd.telnetd /usr/sbin/tcpd /usr/sbin/in.telnetd -L /usr/sbin/ttysnoops my /etc/snooptab is as follows # /etc/snooptab # # these display directly on the specified tty.. no client necessary # # tty snoopdevtypeexecpgm # ttyp0 /dev/pts5 login /bin/login ttyp1 /dev/pts1 login /bin/login ttyp2 /dev/pts2 login /bin/login ttyp3 /dev/pts3 login /bin/login ttyp4 /dev/pts4 login /bin/login # # # the 'socket' snoop-device is for use with the ttysnoop client (any tty not # listed above will match the wildcard) # * socket login /bin/login I am using potato with the latest telnetd and ttysnoop packages. The man page or other docs I have found say nothing of these messages. I am stumped. Anyone got any ideas? Thanks in advance, Ben
Re: ttysnoop
On Tue, Oct 19, 1999 at 05:52:33PM -0800, Ben Lutgens wrote: the entry in my inetd.conf for telent is telnet stream tcp nowait telnetd.telnetd /usr/sbin/tcpd /usr/sbin/in.telnetd -L /usr/sbin/ttysnoops That line looks wrong to me. Remove the telnetd.telnetd to begin with. I think /usr/sbin/tcpd should be the first in the chain. -- ++ | Eric G. Milleregm2@jps.net | | GnuPG public key: http://www.jps.net/egm2/gpg.asc | ++
problems with ttysnoop
Hi! I've just installed ttysnoop and I have the following problems: First, it doesn't log off all right, as after some login I get (at least getty does) that there are 20 users (or more) in the system when in fact there are only 3. Also I'm noticing that ttysnoop is using two ttys per line. That is, when you log in from inetd, you get ttyp1 and when you log in again you get ttyp3. Is this an (un)documented feature, or just a simple bug? Thanks a lot in advance for your help. Salutacions, Pere __oUltima Ratio Regum 2:343/108.91 - _`\;_mailto:[EMAIL PROTECTED] PGP key available --- (_)/ (_) http://casal.upc.es/~pere/
Re: help w/ ttysnoop
On Fri, 24 Apr 1998, Daniel Martin at cush wrote: Shaleh [EMAIL PROTECTED] writes: Can someone please help me setup ttysnoop?? I have set up the entry in inetd.conf. /etc/inetd.conf telnet stream tcp nowait root/usr/sbin/tcpd /usr/sbin/in.telnetd -L/usr/sbin/ttysnoops /etc/snooptab * socket login /bin/login When I telnet to my box, ttysnoops appears to not spawn. Any help appreciated. Have you told inetd to look at the new config. file? You do this with: (as root) killall -HUP inetd Or I suppose you could reboot, but that's win95-ish thinking. hehe... Speaking of win95, it died on me coz one measly dll was crosslinked... Michael Beattie ([EMAIL PROTECTED]) --- CONNECT 300... Connect 300?!?!?! #%^# NO CARRIER --- Debian GNU/Linux Ooohh You are missing out! -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
help w/ ttysnoop
Can someone please help me setup ttysnoop?? I have set up the entry in inetd.conf. /etc/inetd.conf telnet stream tcp nowait root/usr/sbin/tcpd /usr/sbin/in.telnetd -L/usr/sbin/ttysnoops /etc/snooptab * socket login /bin/login When I telnet to my box, ttysnoops appears to not spawn. Any help appreciated. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: help w/ ttysnoop
Shaleh [EMAIL PROTECTED] writes: Can someone please help me setup ttysnoop?? I have set up the entry in inetd.conf. /etc/inetd.conf telnet stream tcp nowait root/usr/sbin/tcpd /usr/sbin/in.telnetd -L/usr/sbin/ttysnoops /etc/snooptab * socket login /bin/login When I telnet to my box, ttysnoops appears to not spawn. Any help appreciated. Have you told inetd to look at the new config. file? You do this with: (as root) killall -HUP inetd Or I suppose you could reboot, but that's win95-ish thinking. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: help w/ ttysnoop
Sorry, yes I have done both. (-; Daniel Martin at cush wrote: Shaleh [EMAIL PROTECTED] writes: Can someone please help me setup ttysnoop?? I have set up the entry in inetd.conf. /etc/inetd.conf telnet stream tcp nowait root/usr/sbin/tcpd /usr/sbin/in.telnetd -L/usr/sbin/ttysnoops /etc/snooptab * socket login /bin/login When I telnet to my box, ttysnoops appears to not spawn. Any help appreciated. Have you told inetd to look at the new config. file? You do this with: (as root) killall -HUP inetd Or I suppose you could reboot, but that's win95-ish thinking. -- --- How can you see, when your mind is not open? How can you think, when your eyes are closed? - Jason Bonham Band, Ordinary Black and White --- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
ttysnoop beeping..
Is there anyway I can turn off the beeping in ttysnooped devices? --- Paul Miller [EMAIL PROTECTED], finger for public PGP key -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .
