who for ftp

[Bob Jonkman]

Andrew Mathenge wrote:
> They must appear on the process list. How about "ps aux" Have you
> tried that. You can filter for SSH using:
>
> ps aux | grep "ssh"
>
> Andrew.
Hi Andrew:

ps aux | grep ssh
ps aux | grep ftp

both show that ssh or ftp is running, but doesn't tell me who's logged in.

mcr at simtone.net wrote:
 > You can read /var/log/auth.log
 > who only shows people currently logged in anyway.
 > "last" may or may not tell you anything

I think I can get the info out of auth.log, but that's going to take 
some logfile parsing to eliminate all the doorknob-rattlers trying to 
break in, and to remove the logged-out connections.

grep opened /var/log/auth.log | grep sshd

is a start.  Doesn't appear to show the SFTP or SCP sessions, tho.

I'll keep at it.  Further suggestions are welcome...

--Bob.

> On Tue, Mar 31, 2009 at 1:47 PM, Bob Jonkman <bjonkman at sobac.com> wrote:
>   
>> I have some logins on my server using SCP or SFTP; is there any way to
>> see who it is?  The 'who' command only shows SSH and console
>> sessions...
>>
>> Thanx,
>> --Bob.
>>
>>
>> -- -- -- --
>> Bob Jonkman <bjonkman at sobac.com>         http://sobac.com/sobac/
>> SOBAC Microcomputer Services              Voice: +1-519-669-0388
>> 6 James Street, Elmira ON  Canada  N3B 1L5  Cel: +1-519-635-9413
>> Software   ---   Office & Business Automation   ---   Consulting
>>
>>
>>
>> --
>> ubuntu-ca mailing list
>> ubuntu-ca at lists.ubuntu.com
>> https://lists.ubuntu.com/mailman/listinfo/ubuntu-ca
>>
>>     
>
>   

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-ca/attachments/20090331/81f7d3e5/attachment.html>