Can't sniff the ssh connection, but possibly could snoop the shell
directly. Have to run a debugger on it.

On Tue, 2003-01-07 at 02:21, James Mabry wrote:
> Hey all,
> Another user of the PLUG irc server and I were discussing wheter it is 
> possible for the root user of a system to snoop on an ssh session that 
> is currently in progress on that machine. Can this be done? Thanks.
-- 
David IS Mandala
gpg fingerprint 8932 E7EF CCF5 1B8C 1B5C  A92E C678 795E 45B2 D952
Phoenix, AZ (480) 460-7546 HP, (602) 321-8277 CP
http://www.them.com/~davidm/