I've got a couple of Linux servers going (mixed distros, mainly Red Hat and Debian based though) that are accessible to a group of people... I need to monitor everything that happens in SSH, both input and output and was wondering if anyone had any recommendations for software or a method of doing this? Ideally I'd like each user's actions to go into somewhere like /var/log/users/username.ssh or similar and then have those e-mailed somewhere at the end of each day.
TL;DR I need software that monitors SSH input/output.
[link] [9 comments]