5 ms·

Maybe slightly off-topic, but does anybody here know how to record an(or any) SSH session(s)? On a debian server, for example? I remember seeing someone do a d

Maybe slightly off-topic, but does anybody here know how to record an(or any) SSH session(s)? On a debian server, for example? I remember seeing someone do a demo on this but the result, after only 2 minutes where insane. There was so much data to go through that you might aswell just give up on trying to get anything useful.

anonacct37 3y ago
In the old days I played with something like this: https://github.com/desaster/kippo https://github.com/desaster/kippo But a more modern alternative seems to be the container based approach outlined here. https://lwn.net/Articles/848291/ https://lwn.net/Articles/848291/
wkat4242 3y ago
PuTTY has very expensive logging options ranging from visible output only to full control codes and even packets. I always assumed OpenSSH offers this too but I've never had a need to actually check. I guess you can just 'tee' it anyway.
sph 3y ago
The `script` command is available and pre installed on most Linux distros.
zachn 3y ago
I wrote an eBPF application that is launched and killed by a PAM session script. It uses the PPID to only record commands and arguments associated with that session. My application was heavily influenced by execsnoop: https://github.com/iovisor/bcc/blob/master/tools/execsnoop.py https://github.com/iovisor/bcc/blob/master/tools/execsnoop.p...