monitoring shell commands (recording username/cmd/time)

[Dan Vande More]

On Thu, 2004-06-17 at 21:22, Andrew Nelson wrote:
> I'm wondering if there is a version of bash or tcsh that logs all commands
> to a file with username and time?   I've tried Sudo, but it's not all that
> practical for my purpose (I'm not that interested in restricting access, 
> just
> seeing who has done what at which time...)   Can anyone help?

Yeah, there is a BOFH patch for bash, you can get from here:

http://www.ccitt5.net/archives/

It produces syslog messages like this:

Jun 17 23:50:02 server bash[12725]: [user1] cd 
Jun 17 23:50:02 server bash[12725]: [user1] ll
Jun 17 23:50:08 server bash[12725]: [user1] vi foo.txt
Jun 17 23:50:58 server bash[11642]: [user1] vi bar.txt


HTH!

-Dan