Re: Logging Traffic by user @ OpenSSH 3.8.1

Miro Dietiker, MD Systems wrote:
> Hi!
>
> For a productive environment we are currently logging via iptables all
> SSH traffic for specific machines. Due to the reason, that multiple
> customers use SSH on that machine, we need to log the traffic amount of
> each user.
> Before, data transfer have most been done via ftp and www by our
> customers. We like to provide ssh/sftp access or data tunnelling for all
> customers on a shared machine, where the measurement of the usage per
> customer seems not possible from my point of view. And in the same
> moment all is out of controle!
Yes you are right, It's not possible to log the traffic of per user on lan.
for that you need trasport layer firewall like socks. IPTABLES are use for
implementing network layer firewall. I am using  IPTRAF for logging traffic
but it's not possible to log traffic in IPTRAF for per user bassis.

> Current Development environment:
> OpenSSH_3.8.1p1 Debian-8.sarge.4, OpenSSL 0.9.7e, 25Oct 2004
>
> Is there anyone having an idea how to create a per user traffic log?
>
> Thanks a lot!
>
> +-------------------------------+  +-------------------------------+
> | Miro Dietiker                 |  | MD Systems Miro Dietiker      |
> | Dipl. Ing. FH Elektrotechnik  |  | Alte Zürcherstrasse 10        |
> |                               |  | 8903 Birmensdorf              |
> |                               |  |                               |
> | Mobile:   +41 (0)78 707 30 10 |  | Geschäft: +41 (0)43 344 03 56 |
> |                               |  | Fax:      +41 (0)43 344 03 57 |
> | m.dietiker@md-systems.ch      |  | info@md-systems.ch            |
> |                               |  |             www.md-systems.ch |
> +-------------------------------+  +-------------------------------+
With Cheers,
Hardik Dalwadi.