Unix Audit

What information you obtain from the ppp link would depend on how it has been configured. A good place to start the investigation is to check on the IP daemon, and the configuration of the PPP daemon.

These will allow you to create a log file tosave certain bits of information from each PPP session. I unfortunately do not have access to an SCO machine, to be more specific in this answer, but doing a man on the IP daemon (on SUN Solaris it's 'ipd') and on the PPP daemon (again SUN Solaris has pppd) provided some good information as a starting place.

Another spot to check could be the file wtmp and utmp, although the PPP connection might not actually log user login's in there. It's worth a quick look though. Normal login information is listed here, and the command 'who' makes use of this file/structure to list information on who has logged in and when.

Best of luck on this quest.

Normally the PPPlink to SCO Unix will use a nppp user to make the ppp connection. After this the user will be presented with a normal logon. The audit trace on nppp can be activated with the SCO V scoadmin command. Try accounts as a sub.

Normally the PPPlink to SCO Unix will use a nppp user to make the ppp connection. After this the user will be presented with a normal logon. The audit trace on nppp can be activated with the SCO V scoadmin command. Try accounts as a sub.

come to find out from a prompt, by typing the word "last" will show all users who have logged in.

Man, oh man. You sure got me.

This question was auto closed due to inactivity