SCO OpenServer下的终端监控系统-Spy FileSystem

作者： unknow

作为系统管理员,有时候需要进行系统紧急维护,但系统用户众多,
很难一一通知,即使可以通过使用wall等命令发消息给用户,但如果
碰到用户不在电脑前就比较麻烦了.
为此,多番寻找可以远程控制登录用户的软件,终于发现了SPY文件
系统,下载连接:
ftp://stage.caldera.com/TLS/tls604.tar.Z

SPY的英文说明：

SPY is a suite of programs that allows you to passively and silently observe
what users are typing on the system. You can observe each keystroke, the entire
screen as they see it being drawn, or even inject keys into their program as
if they typed it. A special mode allows you to observe the complete
contents of any multiscreen on the system, with or without 6845 attribute
bytes, allowing color, underline, or blink information on the other tty
to be shown as well.

SPY is completely passive to the user and program and runs under any tty
device (console, serial, pseudo, etc.).
SPY cannot monitor a console that is in graphics mode.

SPY is implemented as an SVR3 filesystem for Open Server Release 5.0,
dynamically creating all necessary directories and files. This allows
standard UNIX tools like cat, dd, hd, etc. to use all of SPY@#s features
and allows you to write your own custom tools. Most of SPY@#s features can
even be used across NFS, allowing for remote monitoring and controlling
of programs and users from another machine.

注意:
安装后千万不要未经告知远程控制同事使用的机器,尤其是
有心脏问题的同事,切记!
仅在SCO OpenServer 5.0.4上测试通过,其它版本请自己测
试.
请先在非正式使用服务器上测试,一切后果,概不负责!

安装步骤:(需要以root用户登录)
1) 解压缩:
uncompress tls604.tar.Z
tar xvf tls604.tar
(当前目录下分别生成spyfs-1.1、arpwatch、dumpscreen、
sockinfo、tcpdump等目录)
2) 安装:
cd spyfs-1.1
(为保险起见,请先阅读README)
# ./installit
Installing the SPY package
Installing new header files
Installing new command files
Installing SPY driver files
SPY installed. You still need to relink a new kernel and reboot.

After this message, relink your kernel, answering @#y@# to everything.
# /etc/conf/cf.d/link_unix
关闭系统重新启动,如果安装正常,启动时有以下信息:
fsstat: SPY filesystem unmounted and ok
fsstat: mounted /spy
3) 使用:
监控终端: spyon
usage: spyon [options] name:number
or : spyon [options] ttyname
where options are any of the following:
-r show raw queue contents and quit
-c show canonical queue contents and quit
-o show output queue contents and quit
-a show all 3 queue contents and quit
-l list available spynames for using @#name:number@# format
-m mountpoint use this mountpoint instead of /spy
-z use with -r, -c, or -o: don@#t quit

还有spysend、spycons、spycontrol等命令，具体使用参见README.

返回顶部