Saturday, April 27, 2024
 Popular · Latest · Hot · Upcoming
1
rated 0 times [  1] [ 0]  / answers: 1 / hits: 12400  / 2 Years ago, thu, june 9, 2022, 6:21:44



I work in college network. I have shared my computer password with few friends. So any of them can ssh/ scp on my system. Is there any way to generate the log of connection ( if some one make connection through ssh or copying using scp ) data. ( Just in case to see what they do on my system ) ?
I am using openssh-server in ubuntu 10.10 system.


It seems to me that we can generate log or can get notification for ssh connection ( by looking SSH_CONNECTION parameter ) but no way for scp, or is there any ?



EDIT: I little bit of solution : create a rc file inside .ssh directory and create log from that rc file.


More From » server

 Answers
4

By default, the OpenSSH server logs to the AUTH facility of syslog, at the INFO level. If you want to record more information - such as failed login attempts - you should increase the logging level to VERBOSE.



It's recommended to log more information if you're curious about malicious SSH traffic.



To increase the level, find the following line in your sshd_config:



LogLevel INFO
and change it to this:



LogLevel VERBOSE
Now all the details of ssh login attempts will be saved in your /var/log/auth.log file.



More info at: https://help.ubuntu.com/community/SSH/OpenSSH/Configuring


[#39875] Saturday, June 11, 2022, 2 Years  [reply] [flag answer]
Only authorized users can answer the question. Please sign in first, or register a free account.
armis

Total Points: 38
Total Questions: 106
Total Answers: 118

Location: Mali
Member since Sat, Feb 12, 2022
2 Years ago
;