Snoopy: surveiller les commandes exécutées sur un système Linux

  • Télécharger le script d’installation:

wget -O snoopy-install.sh  https://raw.githubusercontent.com/a2o/snoopy/install/doc/install/bin/snoopy-install.sh

  • Lancer l’installation:

chmod +x snoopy-install.sh

Modes d’installation:

– ‘stable’ ; installs latest stable version
– ‘preview’ ; installs latest preview version (defaults to git-master most of the time)
– ‘X.Y.Z’ ; installs specific version from release package
– ‘git-REF’ ; install directly from git, where REF is either:
– branch name,
– tag,
– commit SHA hash.
– ‘path/to/snoopy-X.Y.Z.tar.gz’ ; installs specific pre-downloaded Snoopy release package
– ‘download’ ; only downloads latest Snoopy release package

Pour installer  la dernière version stable

./snoopy-install.sh stable

SNOOPY LOGGER is now installed and enabled.

 

-Le système doit être redémarré

TIP #1: If Snoopy is to be enabled for all processes, you need
to restart your system, or at least all services on it.

-Utiliser snoopy-disable et snoopy-enable pour désactiver/réactiver le service snoopy

TIP #2: If you ever need to disable Snoopy, you should use provided
‘snoopy-disable’ script. Use ‘snoopy-enable’ to reenable it.

exemple:

snoopy-disable

SNOOPY: Removing from /etc/ld.so.preload: /usr/local/lib/libsnoopy.so
SNOOPY: Disabled.
SNOOPY: Hint: Your system needs to be restarted to finish Snoopy cleanup.

snoopy-enable

SNOOPY: Adding to /etc/ld.so.preload: /usr/local/lib/libsnoopy.so
SNOOPY: Hint #1: Reboot your machine to load Snoopy system-wide.
SNOOPY: Hint #2: Check your log files for output.
SNOOPY: Enabled.

TIP #3: Snoopy output can usually be found somewhere in /var/log/*
Check your syslog configuration for details.

 

– le fichier de configuration est :/etc/snoopy.ini

TIP #4: Configuration file location: /etc/snoopy.ini
See included comments for additional configuration options.

    -Modifier le fichier de logs snoopy:

  ajouter : output = file:/var/log/snoopy.log

  puis  relancer le service

 

 

Articles liés