Screen capture or Buffer

[abm086]

Is there a way to configure a cisco 3660 router to capture the screen and dump it to a buffer? Or can this information be sent to a loghost? I would like to be able to track users command histories. I also would like this info sent off to a loghost.
thanks

 

[jgercken]

I have a tacacs server set up that records every command entered in exec mode (w/ name of user). I'm not sure if you can have them sent to a syslog server or not. Do some searching on the Cisco site.

-Jeff ----------------------------------------
Wassabi Pop Tarts! Write Kellogs today!

 

[abm086]

jgercken,
Thanks for the replies on both of my questions. Our tacacs servers are managed at the corporate level so I am asking them if they have this feature or if they can configure it.
thanks again
Bill

 

[ccie9545]

you can log to any syslog server, tacacs server, you can also log to the buffer, but that will take up resources on the router. i would nt suggest logging to the buffer. the only time that i log to the buffer is in our lab, and only to capture short durations of output. Erik Rudnick, CCIE No. 9545
mailto:erik@kuriosity.com

 

[abm086]

What I really want to do is to have aaa accounting data sent to our syslog host. I only see documentation on how to send this info to a tacacs or radius server. I want to be able to see what commands people are running from the time they log in to the time they logout.

 

[ccie9545]

I do not believe that you will be able to accomplish this with a SYSLOG host.

YOu can look at some third party software, I have posted link below, I didn't really get a chance to read it though, so I am not sure if it will work......

Plus you can check out this article and see if helps, its got some information on what syslog messages supports.....I am looking into defining your own syslog messages, and will get back to you when i find something.

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/cddm/cddm111/adguide/syslog.htm#xtocid242302

Erik Rudnick, CCIE No. 9545
mailto:erik@kuriosity.com

 

[ccie9545]

sorry forgot the third party link.

http://www.logec.com/nnm/Syslog.html

Erik Rudnick, CCIE No. 9545
mailto:erik@kuriosity.com