Unix sniffer programs

[bbose00]

Is it possible to write script to monitor form one server to other servers activities like - new file directory creations, file/directory deletion ?

 

[bluedragon2]

These activities can be monitored using BSM auditing tool that comes with Solaris. But, it must be running on each server. It is not a tool like a sniffer.



[Blue]Blue[/Blue] [Dragon]

If I wasn't Blue, I would just be a Dragon...

 

[bbose00]

That means we cannot write shell scripts to do this ?

 

[bluedragon2]

I use BSM auditing on several servers and have the audit files restarted daily with the old days log files sent to one server for checks and archives.



[Blue]Blue[/Blue] [Dragon]

If I wasn't Blue, I would just be a Dragon...

 

[071]

Try 'snoop'

Cheers,
71

 

[bbose00]

How do we know bsm is running in a server ? Is there any unix process(s) to check with ps ?

 

[bluedragon2]

I believe that it is auditd.



[Blue]Blue[/Blue] [Dragon]

If I wasn't Blue, I would just be a Dragon...