Logging user activities

[twig les]

--- Richard Bejtlich <richard_bejtlich at yahoo.com> wrote:
> 
> My goal is to "watch the watchers," i.e. watch for
> abuse of power by SOC people with the ability to view
> traffic captured by sniffers.
> 

Have you considered snooping ttys (man watch, man snp)?  It
doesn't seem to be scalable, but I've only tinkered.

=====
-----------------------------------------------------------
Only fools have all the answers.   
-----------------------------------------------------------

__________________________________
Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus