I want to know who is accessing my server at any point in time and see logs from the past, however it is behind an SSH tunnel. How can I do this?
EDIT: See tags, running debian on both machines. SSHD is my SSH server.
EDIT: I already know how to List all connected SSH sessions? but I don't know which if any apply to ssh tunnels. They all seem to refer to PTS or TTY and I don't think SSH tunnels are like that although I may be wrong.