Topic 'Re: See evey terminal command passed by the GUI' in forum 'All Things Unix' - dslreports.com

Re: See evey terminal command passed by the GUI

Thu, 27 Sep 2012 13:39:38 EDT

Rexter posted : I didn't find any info in /var/log/messages, and I didn't find a way to log all syscalls.

Re: See evey terminal command passed by the GUI

Wed, 26 Sep 2012 22:05:17 EDT

XCOM posted : So..... What's the outcome?
--
[nUll@dcypher ~]$

Re: See evey terminal command passed by the GUI

Mon, 24 Sep 2012 20:18:10 EDT

XCOM posted : ok so back at this....

Ok if you are trying to see every command done in cli by a user thats going to be a bit tricky.
You will have to audit each user by using something like rootsh or as said by Bruno acct.

To pipe it to conky all you have to do is something like execi lastcomm username

Last User Command :${execi lastcomm username | tail}

Not perfect but gives you an idea.
Good Luck
--
[nUll@dcypher ~]$

Re: See evey terminal command passed by the GUI

Mon, 24 Sep 2012 11:53:39 EDT

Brano posted : On most systems it's the acct package.

Re: See evey terminal command passed by the GUI

Mon, 24 Sep 2012 11:50:52 EDT

XCOM posted :

said by Rexter:

How do you turn on accounting?

As in "user" accounting?
--
[nUll@dcypher ~]$

Re: See evey terminal command passed by the GUI

Mon, 24 Sep 2012 11:49:34 EDT

XCOM posted :

said by Rexter:

lol, typical RTFM linux guy. :) I'll spend some more time with my buddy Google.

As of now, I haven't found the log info I'm looking for, to even import into Conky, so I'm not quite there yet.

I am sorry wtf did you wanted? :D All I said was that yest it can be done...
Give me some time to get out from work and I can assist but as it's been replayed here you need to cat the messages file and outputted to conky.
--
[nUll@dcypher ~]$

Re: See evey terminal command passed by the GUI

Mon, 24 Sep 2012 11:29:34 EDT

Brano posted : What exactly are you looking for? Different programs log to different log files (most of the log files are in /var/log though).

Re: See evey terminal command passed by the GUI

Mon, 24 Sep 2012 11:26:52 EDT

Rexter posted : lol, typical RTFM linux guy. :) I'll spend some more time with my buddy Google.

As of now, I haven't found the log info I'm looking for, to even import into Conky, so I'm not quite there yet.
--
I'm with the Central Government. I'm here to help you. Now bend over, really, I'm helping you, just, just stay still. You'll feel better in a moment.

Re: See evey terminal command passed by the GUI

Mon, 24 Sep 2012 10:29:56 EDT

XCOM posted : Yes it can.
:)

Re: See evey terminal command passed by the GUI

Mon, 24 Sep 2012 09:39:40 EDT

Rexter posted : Yea, what Brano is describing sounds like what I want, but I'd like it to be scrolling in a semi-transparent windows on the desktop. I was wondering if Conky might be able to do that.
--
I'm with the Central Government. I'm here to help you. Now bend over, really, I'm helping you, just, just stay still. You'll feel better in a moment.

Re: See evey terminal command passed by the GUI

Mon, 24 Sep 2012 09:36:11 EDT

Rexter posted :

You can watch 'live' a log file with tail command, i.e. tail -f /var/log/messages

I opened a terminal, and entered this command. Then by the gui, I opened, played around, and then closed several apps. No information showed up in the terminal, under the said command.

How do you turn on accounting?

Re: See evey terminal command passed by the GUI

Sun, 23 Sep 2012 00:04:46 EDT

XCOM posted : conky to watch the processes and or logs?
--
[nUll@dcypher ~]$

Re: See evey terminal command passed by the GUI

Fri, 21 Sep 2012 09:46:23 EDT

Brano posted : I'd direct your attention to /var/log/ directory.
There you can see most of the system logs and messages.

You can watch 'live' a log file with tail command, i.e. tail -f /var/log/messages

If you turn on accounting it can be pretty detailed.

Re: See evey terminal command passed by the GUI

Fri, 21 Sep 2012 09:43:02 EDT

Rexter posted :

said by JohnInSJ:

You could trace all syscalls, but that would get ugly fast.

Ugly is good. That sounds like what I want.
--
I'm with the Central Government. I'm here to help you. Now bend over, really, I'm helping you, just, just stay still. You'll feel better in a moment.

Re: See evey terminal command passed by the GUI

Fri, 21 Sep 2012 09:41:54 EDT

Rexter posted : Yea, that's what brought on the idea. I basically want that, but for everything not just one program.

Re: See evey terminal command passed by the GUI

Fri, 21 Sep 2012 09:27:08 EDT

Brano posted : You could see standard output and errors when you launch a GUI app from terminal and leave the terminal open. This is sometime useful for troubleshooting. Most apps are quite chatty with status messages to stdout and/or stderr.

Re: See evey terminal command passed by the GUI

Fri, 21 Sep 2012 09:00:48 EDT

JohnInSJ posted :

said by Rexter:

Yea, basically. Launchers, for example pass commands. When I click restart, or shutdown, a command is passed. My understanding is on Linux system most gui items pass commands. I just want them to log, and have then scroll.

Well, there's your problem. Your understanding is wrong.

Everything a command line application does is accomplished via system calls. Those same system calls are also used by GUI apps. Want to rm files? call unlink() in your native gui or command line app.

You could trace all syscalls, but that would get ugly fast.
--
My place : »www.schettino.us

Re: See evey terminal command passed by the GUI

Fri, 21 Sep 2012 08:38:58 EDT

Rexter posted : Yea, basically. Launchers, for example pass commands. When I click restart, or shutdown, a command is passed. My understanding is on Linux system most gui items pass commands. I just want them to log, and have then scroll.
--
I'm with the Central Government. I'm here to help you. Now bend over, really, I'm helping you, just, just stay still. You'll feel better in a moment.

Re: See evey terminal command passed by the GUI

Fri, 21 Sep 2012 08:07:32 EDT

nwrickert posted : Check what accounting options are available for your system.

In opensuse 12.2, I see that there is a package called "acct". The documentation says

quote:
acct - User-Specific Process Accounting

This package contains the programs necessary for user-specific process accounting: sa, accton, and lastcomm.

I'm pretty sure that is what you want.

I don't have it installed. I do remember using it on an earlier unix system (around 1990).

Note that it will provide information all all commands used, not just those started from the GUI.
--
AT&T Uverse; Zyxel NBG334W router (behind the 2wire gateway); openSuSE 12.2; firefox 15.0

Re: See evey terminal command passed by the GUI

Thu, 20 Sep 2012 23:32:37 EDT

Black Box posted : I think he wants to trace which programs are launched, with which switches and with which indirections. While technically not CLI, It could make sense. I don't think it is possible without patching the system. Not everything launched touches a shell, be it non-interactive even.
--
Keep It Safe, Stupid!
Yes, I CanChat. Can You?

Re: See evey terminal command passed by the GUI

Thu, 20 Sep 2012 19:22:51 EDT

anon posted : What makes you think the gui is passing commands to the cli?

See evey terminal command passed by the GUI

Thu, 20 Sep 2012 18:47:22 EDT

Rexter posted : I'd like to have a widget on my desktop, that logs, and scrolls every terminal command that is passed by the gui. Can Conky do this. Any other ideas?