Session recording for Tailscale SSH in beta

Re:Session recording for Tailscale SSH in beta by pelagicAustral on Thursday May 11, 2023 @07:03PM (#35909498)

Maybe slightly off-topic, but does anybody here know how to record an(or any) SSH session(s)? On a debian server, for example?

I remember seeing someone do a demo on this but the result, after only 2 minutes where insane. There was so much data to go through that you might aswell just give up on trying to get anything useful.

[ Parent | on HN ]

Re:Session recording for Tailscale SSH in beta by anonacct37 on Thursday May 11, 2023 @07:36PM (#35909839)

In the old days I played with something like this: https://github.com/desaster/kippo

But a more modern alternative seems to be the container based approach outlined here. https://lwn.net/Articles/848291/

[ Parent | on HN ]

Re:Session recording for Tailscale SSH in beta by wkat4242 on Thursday May 11, 2023 @08:28PM (#35910298)

PuTTY has very expensive logging options ranging from visible output only to full control codes and even packets.

I always assumed OpenSSH offers this too but I've never had a need to actually check. I guess you can just 'tee' it anyway.

[ Parent | on HN ]

Re:Session recording for Tailscale SSH in beta by zachn on Friday May 12, 2023 @01:30AM (#35912269)

I wrote an eBPF application that is launched and killed by a PAM session script. It uses the PPID to only record commands and arguments associated with that session. My application was heavily influenced by execsnoop:

https://github.com/iovisor/bcc/blob/master/tools/execsnoop.p...

[ Parent | on HN ]

Re:Session recording for Tailscale SSH in beta by sph on Friday May 12, 2023 @02:19AM (#35912641)

The `script` command is available and pre installed on most Linux distros.

[ Parent | on HN ]