I have an idea for my project like this. I had already root access of a server. The users in this server are using SSH to connect with. What I wanna do is to somehow when they use SSH to connect to the server so I would be able to redirect their connection to another server ( which I have set up before) to capture their actions.
I have tried to use Logskey. Unfortunately it didn't work when users using SSH to connect.
I am sorry if my idea is dumb and if you have anything good solution please help me.
Thank you so much.