根据IP分别审计Linux远程用户历史命令@20080715

应CU论坛中某网友的发问而写

往.bashrc里加行
HISTFILE=.bash_history_$(w | grep `ps|grep ps|awk '{print $2}'`|awk '{print $3}')

让每个IP来的.bash_history变成.bash_history_IP