SEARCH
NEW RPMS
DIRECTORIES
ABOUT
FAQ
VARIOUS
BLOG

BotDetect - Real-Time Bot Detection API
 
 

MAN page from Mandrake Other ttysnoop-0.12c-5.i386.rpm

TTYSNOOP

Section: Maintenance Commands (8)
Index
BSD mandoc
 

NAME

ttysnoop - snoop on a user's tty 

SYNOPSIS

ttysnoop[pty]
ttysnoops[loginname] 

DESCRIPTION

Thettysnoop/ttysnoopsclient-server combo can be used to snoop (watch) on a user's login tty.The server(ttysnoops)is usually started by getty(8) or telnetd(8) and reads the file/etc/snooptabto find out which tty's should be cloned and which programs to run on them(usually /bin/login). A tty may be snooped through a pre-determined (ie.fixed) device, or through a dynamically allocated pseudo-tty (pty). This is also specified in the /etc/snooptabfile. To connect to the pty, thettysnoopclient should be used. 

Format of /etc/snooptab

The/etc/snooptabfile may contain comment lines (starting with a '#'), empty lines, or entriesfor tty's that should be snooped upon. The format of such an entry is as follows:

tty   snoop-device   type   program

wherettyis the leaf-name of the tty that should be snooped upon (eg. ttyS2, not/dev/ttyS2) OR the wildcard '*', which matches ANY tty.snoop-deviceis the device through whichttyshould be snooped (eg. /dev/tty8) OR the literal constant "socket". The latter is used to tellttysnoopsthat the snoop-device will be a dynamically allocated pty.typespecifies the type of program that should be run, currently recognizedtypes are "init", "user" and "login" altough the former two aren't reallyneeded. Finally,programis the full pathname to the program to run when ttysnoopshas cloned ttyontosnoop-device  

EXAMPLE

The following example/etc/snooptabfile should illustrate the typical use ofttysnoop/ttysnoops

 # # example /etc/snooptab # ttyS0    /dev/tty7    login    /bin/login ttyS1    /dev/tty8    login    /bin/login # # the wildcard tty should always be the last one in the file # *        socket       login    /bin/login # # example end #

With the above example, whenever a user logs in on /dev/ttyS0 or /dev/ttyS1,either tty will be snooped through /dev/tty7 or /dev/tty8 respectively. Anyother tty's will be snooped through a pty that will be allocated at the timeof login. The system-administrator can then runttysnoop ptyto snoop through the pty. Note that it is up to the system-administrator to setup getty and/or telnetd so that they executettysnoopsinstead of /bin/login. 

SEE ALSO

getty(8),telnetd(8) 

FILES

/etc/snooptab 

BUGS

The program is unable to do any terminal control-code translations for theoriginal tty and the snoop-device. I doubt it will ever do this. 

AUTHOR

Carl Declerck, carlAATTmiskatonic.inbe.net


 

Index

NAME
SYNOPSIS
DESCRIPTION
Format of /etc/snooptab
EXAMPLE
SEE ALSO
FILES
BUGS
AUTHOR

This document was created byman2html,using the manual pages.
 
ICM Bot detect detector