Shell logging

Goauld client SSH session logging

Shell logging records an operator session in binary ttyrec format for later review.

Quick usage

tealc ssh AGENT_NAME --log

The --log option is also available for SCP, rsync, rclone, and jump operations.

Output

Log files are saved in the current directory as:

[AGENT_NAME]-[CURRENT_DATE]_[CURRENT_TIME].log

Example: user@hostname1-2026-08-09_14-30-05.log

Sessions are recorded in binary ttyrec format through togettyc. Open them with togettyc or another ttyrec-compatible player; they are not readable as plain text.

Failure behavior

Note

If the session fails to authenticate, the log file is deleted rather than left on disk as a partial recording.

Security and storage

Recordings can contain commands, output, credentials typed into applications, and sensitive target data. Store them in an access-controlled location and remove them according to the engagement’s retention policy.