bahattab
22-12-2008, 08:01 PM
How to See what commands have been run?
all you have to do is type history command to display the history of commands:
Code:
history
history | less
#history
is the command to see all the commands enter by the terminal
it is stored in
/root/.bash_history file for user root and similarly for other users
in their home directory
joe@localpub# cat >> .bashrc << EOF
EXPORT REMP="ping -c 10 IP.ADD.RE.SS"
EOF
joe@localpub# source .bashrc
i grep from the ICMP/IPtables log who has pinged me 10 times. i dont even appear in your .bash_history http://www.atyafonline.com/vb/imgcache/1242.png or parse the ping -c 10 IP.ADD.RE.SS from egress traffic log at startup/shutdown. now you audit. :-p
also you can use
#history | more
http://nixcraft.com/getting-started-tutorials/369-see-what-commands-have-been-run-your-linux-server.html
all you have to do is type history command to display the history of commands:
Code:
history
history | less
#history
is the command to see all the commands enter by the terminal
it is stored in
/root/.bash_history file for user root and similarly for other users
in their home directory
joe@localpub# cat >> .bashrc << EOF
EXPORT REMP="ping -c 10 IP.ADD.RE.SS"
EOF
joe@localpub# source .bashrc
i grep from the ICMP/IPtables log who has pinged me 10 times. i dont even appear in your .bash_history http://www.atyafonline.com/vb/imgcache/1242.png or parse the ping -c 10 IP.ADD.RE.SS from egress traffic log at startup/shutdown. now you audit. :-p
also you can use
#history | more
http://nixcraft.com/getting-started-tutorials/369-see-what-commands-have-been-run-your-linux-server.html