Number of connections per user (command and log)... how to??

[cosio]

Hi all, Hope you can help me with this..

I have Ubuntu 9.04 and I would like to know what is the command to find out the number of connections per user (i.e. ssh) and also what syslog module do I need to modify and how to enable it in order to have it logged, thing is I need to generate this event in order to see it in RSA enVision, I've tried with "who" but nothing is displayed, do I need to program something besides that? or what can I do? to have no. of connections and have that logged so I can see the event in enVision.

Please take note I'm new at Linux and Im just starting to understand it.

thanks a lot.

[Rubberman]

What kind of connections are you referring to, incoming (logins) or outgoing (network streams)?

[cosio]

Not logins, much more like outgoing as you stated like SSH, FTP, including terminals. All connections per user logged in the Ubuntu machine.

Hope this help, I really need to find out how to pull this off.

Thanks!!

[Rubberman]

Well, one of the things you can use is netstat. See what you get with netstat -e --numeric-users | less. At the top of the output you will see who (last field is the user id) is connected to what. There are more tools to use as well, but you know what you need to know - remember that Google is your friend!