Ubuntu – Scp / ssh log on ssh-server

Ubuntu – Scp / ssh log on ssh-server

logserverssh

I work in college network. I have shared my computer password with few friends. So any of them can ssh/ scp on my system. Is there any way to generate the log of connection ( if some one make connection through ssh or copying using scp ) data. ( Just in case to see what they do on my system ) ?
I am using openssh-server in ubuntu 10.10 system.

It seems to me that we can generate log or can get notification for ssh connection ( by looking SSH_CONNECTION parameter ) but no way for scp, or is there any ?

EDIT: I little bit of solution : create a rc file inside .ssh directory and create log from that rc file.

Best Answer

  • By default, the OpenSSH server logs to the AUTH facility of syslog, at the INFO level. If you want to record more information – such as failed login attempts – you should increase the logging level to VERBOSE.

    It’s recommended to log more information if you’re curious about malicious SSH traffic.

    To increase the level, find the following line in your sshd_config:

    LogLevel INFO
    and change it to this:

    LogLevel VERBOSE
    Now all the details of ssh login attempts will be saved in your /var/log/auth.log file.

    More info at: https://help.ubuntu.com/community/SSH/OpenSSH/Configuring

  • Add a Comment

    Your email address will not be published. Required fields are marked *