Hi, I have tested audit subsystem with FreeBSD 7.1. But the weird thing is that I only get commands that are executed on console not the ones that are executed through ssh. Am I missing something here? I have followed these steps: http://www.freebsd.org/doc/en/books/handbook/audit-install.html Regards.