[KornNut]

Is anyone familiar with the Linux KeyLogger?

I am trying to use the LKL (Linux Key Logger). I am able to run it on its own with the shell, but I want to be able to run it in the background (as a daemon), so that it opens up at start up and runs in the background.

Thanks in advance for the help.

[Pavlyk]

http://sourceforge.net/projects/lkl/ is this what you are talking about?

[KornNut]

Yeah, that is the program that I am using.

Like I said, I am able to run it, but I want to know how to run at start up (once one logs on and in the background).

[horndude]

put a line in /etc/rc.d/rc.local and have it run at boot

[KornNut]

I just started to use Linux (for programming purposes), so I am not too familiar with it.

Can you put this in laymens' terms:

put a line in /etc/rc.d/rc.local and have it run at boot

[KornNut]

I think that some one is logging into my new Linux machine at college and and I am trying to figure out who it is.

[horndude]

well some distros vary a bit, but usually the file /etc/rc.d/rc.local contains scripts to be run at boot after everything else has been initialized, so add a line like this:

<directory_where_LKL_is> in there

like if LKL is installed in /usr/bin or /usr/local/bin then just add a line that has LKL or whatever its called in there, it will run at startup, if its installed somewhere else you will have to put the whole path pointing to LKL in there

whatever you type on the command line as a user to run it, put that in there, it must be done as root,cant change system configuration files as a user


edited

well if you want to know who's been using your machine when your not around check the log files----->/var/log/secure------->open this file with an editor and look at it

[KornNut]

okay so i put this line in:

lkl -l -k /root/lkl/keymaps/it_km -o log.file

into the rc.local file while logged on as root

when I reboot the computer, any key entered should show up in the log file, but it doesn't.

This leads me to believe that it is not being started properly..

is there any way I can see if the process is running? And/or if the line I added is correct. I tried top, and it was not in the list of processes. Does it not show background processes or is it just not running?

[horndude]

type ps x for a complete list of running programs under that user your logged in as, in other words if your root ps x will show all roots programs

[KornNut]

RC.local only had one program in its list. Then I added LKL to it by adding the same line that I enter in the shell window to execute it manually:
<< lkl -l -k /root/lkl/keymaps/it_km -o log.file >>

The command: << ps x >> did work. however, LKL does not appear in that list.

So, it must not be set to run at start up correctly.

Any thoughts on what I have done?

If you are on a Linux box and if you feel like it would not take too much time to do so, could you please try this yourself? It would be a huge deal to me if I could accomplish this.