ttyrpld is a multi-OS kernel-level TTY key logger and screen logger with (a)synchronous replay support. It runs on Linux, Solaris, FreeBSD, NetBSD, and OpenBSD.
| Tags | Security Log Analysis Monitoring |
|---|---|
| Licenses | BSD Revised GPL CDDL |
| Operating Systems | POSIX Solaris BSD FreeBSD OpenBSD Linux NetBSD |
| Implementation | C |
| Translations | English German French Dutch Spanish Persian Norwegian Italian Swedish |
Recent releases


Changes: This release updates the code to work with libHX 1.25 and Linux 2.6.27.


Changes: This release updates the kernel parts for Linux 2.6.25, FreeBSD 7.0, OpenBSD 4.3, and NetBSD 4.0.


Changes: This release changes the packet format to be compatible between 32-bit and 64-bit versions, and adds a converter for old log files.


Changes: The kernel interface has been reduced. An experimental Solaris driver was added. Various filesystem operations have been fixed.


Changes: This release fixes the inability to read from rpldev on OpenBSD and re-adds different OpenBSD/NetBSD SIGALRM handling to rpld.