[LBo] who is logged into my system

[Michael Cole]

lsof

try this command as superuser or setup your sudo to allow this command you can 
then see the actuall files in use by a user, or process..



On Monday 19 February 2007 2:45:41 am Andrew Henry wrote:
> How can I find out who is logged into my system remotely and what they
> are *currently* doing?
>
> I have just finished chapter 4 and know of the who command ('who -a' and
> 'who -u') but I have a family member who logs in via SSH using WinSCP
> and 'who -a' does not show them as logged in.  Why is this?  auth.log
> registers that they have logged in.
>
> How can I see what they are currently doing if it's just IO (file
> uploading).  Does this show in ps in some way?  All I can see is that
> they have an sshd & sftp-server process running.
>
> Thanks,
> --andrew
>
> --
> GnuPG Key ID: ECB18ABA
> Fingerprint:  FDF3 91FC F5BC 1164 E217  315E 337E 219B ECB1 8ABA



-- 
Regards
Michael Cole