how to get ssh client history

mathews123 · 07-29-2014, 07:12 AM

i entered into a server system through ssh and do some commands .how the system administrator can get the history of the commands done by all the ssh clients.

Dudydoo · 07-29-2014, 08:36 AM

Commands typed are recorded by the shell (usually Bash), unless the user clears it before logging out.

Quote:

man bash

Quote:

$ history

dipanjan · 08-07-2014, 12:00 AM

Some users are little smart and removes history file (such as ~/.bash_history) but you can still monitor all user executed commands by using the psacct(Process account)package. It allows you to view every command executed by a user including CPU and memory time.For install "yum install psacct" and then "/etc/init.d/acct start" and "chkconfig acct on". It has 3 command line tool (ac,sa,lastcomm).