logging is a Unix feature ; -) was Re: Regarding the keylogger in the linux fedora systems

[Alexandre Dulaunoy]

2008/6/27 Parshwa Murdia <parshwa23 at gmail.com>:
> hi,
>
> i am having a system with the linux fedora core installed in it. could
> anyone tell about the free keyloggers used in the linux fedora core systems
> and the proper installtion of the same, so that all the keystrokes can be
> viewed with all the details.

I don't really know what you mean by "keylogger" but I will extrapolate to
the various possibilities offered by a Unix-like operating system is capable
to reach the nirvana of "keystroke logging". I will also assume that you don't
want to hide your activities but this was already understood ;-)

- script

There is the old and venerable Unix command called "script" that permits
to record a whole interactive session in a text file. Very handy when you
have to record an activity session for a course or making documentation.
You just need to run "script myfile" and this will save all shell interaction
into a file called "myfile". Of course, you are free to add some scripting
around it.

- GNU Screen

A second option is to use the wonderful GNU Screen (but I'm sure that
you already know that very nice GNU package). Screen is capable
to do extensive logging of any session happening in a screen session.

"screen -L" is going to log the activities in screenlog.0 but feel free to
use the screenrc config file to configure it.
Lookup the man page of screen and search the following keywords :
 "deflog / logfile and %n"

- Sebek

You have also more powerful tool like Sebek
(http://www.honeynet.org/tools/sebek/)
often used in honeypot to capture activities of an attacker.

Of course, this is just an overview of the capacity. You have also the
excellent socat (http://www.dest-unreach.org/socat/) that can be used
to capture interaction on any
/dev/ttyp. You can also patch the GNU readline library, use ttyrec,
use the THC vlogger...

But don't forget that such power come with responsibilities.

Hope this helps,

adulau

-- 
-- Alexandre Dulaunoy (adulau) -- http://www.foo.be/
-- http://www.foo.be/cgi-bin/wiki.pl/Diary
-- "Knowledge can create problems, it is not through ignorance
-- that we can solve them" Isaac Asimov