1. 用脚本时刻记录用户IP访问操作信息工具，用shell脚本去记录
2. 每隔一天存放用户信息，记录操作时间，固定地方存放
脚本如下:
在服务器环境变量中加入如下代码:
vi /etc/profile
#!/bin/bash
basedir="/data/log/history/";
if [ ! -d /data/log/history ]
then
mkdir /data/log/history
fi
datedir=$(date +%Y年%m月%d日);
if [ -d “ b a s e d i r basedir basedirdatedir” ];
then
while [ true ]; do
/bin/sleep 1
echo ( d a t e + (date +%Y年%m月%d日%H时%M分%S秒)>> (date+basedir d a t e d i r / datedir/ datedir/datedir.log
netstat -ntup | grep -v ‘10050’ |grep -v ‘127.0.0.1’ |grep -v ‘XXX’ |grep -v ‘XXX’>> b a s e d i r basedir basedirdatedir/$datedir.log
done
else
mkdir b a s e d i r basedir basedirdatedir
echo ( d a t e + (date +%Y年%m月%d日%H时%M分%S秒)> (date+basedir d a t e d i r / datedir/ datedir/datedir.log
nohup /data/shell/xxx.sh >/dev/null 2>&1
fi
启用脚本
source /etc/profile
3.在crontab任务中设置第二天自动更新脚本:
#!/bin/bash
pid=$(ps -ef |grep /data/shell/xxx.sh |grep /bin/bash |awk ‘{print $2}’)
kill -9 $pid
4.效果如下图:
