Using system tools – Whowatch
While keeping a watch on the network, an administrator would also want to keep a watch on users who are currently logged on to the system and also check what each user is doing on the machine.
Whowatch is the perfect tool for all these tasks. It uses a simple text-based interface, which is easy to use and can display information about a username, user process, and also the type of connection being used, such as SSH and telnet.
Getting ready
Since Whowatch doesn't come as a preinstalled package in Linux, we have to install it to use it. The command to install Whowatch is as follows:
apt-get install whowatch
How to do it… ...
Get Practical Linux Security Cookbook now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.