5.7. Tools
5.7.1. susshi-who
Users connected via suSSHi can be easily displayed on the gateway using the susshi-who command included in the container. The command line tool is comparable to the well-known Unix commands who or w.
The command is run within the running container to gather all information:
$ docker exec -it susshi /opt/wasabi/susshi/bin/susshi-who
suID USER PID LOGIN@ IDLE SESSION-ID FEATURES CLIENT TARGET (TARGET IP)
0001 user 15 Nov 21 07:38:55 0:00 20181121-073850-0001-04737 I-A-----Z 15.6.4.5:49319 -> user@target3:22 (19.22.33.17)
0001 user 16 Nov 21 07:54:49 0:00 20181121-075449-0001-04760 I-A--L--Z 15.6.12.16:49534 -> root@target1@cloud27:22 (5.6.66.1)
The susshi-who command does not take any options.
The meaning of the FEATURE flags is described below.
5.7.2. susshi-last
The command susshi-last allows the administrator to list the last user sessions that have been run on the suSSHi instances running on the local server. It also displays the users that are still logged in.
The command is run within the running container to gather all information:
$ docker exec -ti susshi /opt/wasabi/susshi/bin/susshi-last
suID USER PID LOGIN@ LOGOUT@ DURATION SESSION-ID FEATURES CLIENT TARGET (TARGET IP)
0001 user 15 Nov 21 07:38:55 - Nov 21 07:39:25 (00:00) 20181121-073850-0001-04737 I-A-----Z 15.6.4.5:49319 -> user@target3:22 (19.22.33.17)
0001 user 16 Nov 21 07:54:49 - Nov 21 07:59:11 (00:14) 20181121-075449-0001-04760 I-A--L--Z 15.6.12.16:49534 -> root@target1@cloud27:22 (5.6.66.1)
The susshi-last command takes the following options:
- -l, --lastlog
Lastlog filepath, if not set, the environment variable
SUSSHI_LASTLOGis expected or default is used
- -n, -###, --lines
Number of session, including active and finished sessions, defaults to
20
The meaning of the FEATURE flags is described below.
5.7.3. Feature Flags
The FEATURE flags have the following meaning:
Flag |
Description |
|---|---|
A |
User has requested Agent-Forwarding |
C |
User has run SCP on at least one channel |
E |
User hast executed a remote command on at least one channel |
F |
User has run SFTP on at least one channel |
I |
User hast started an interactive session on at least one channel |
L |
User has used Local port forwarding |
R |
User has requested (and may be used) Remote port forwarding |
X |
User has used at least one X11 forwarding in session |
Z |
The user session is running ZLib compression |