Enterprise Unix shell behavior audit system-secondary development based on enterprise audit shell (EAS)

For more information about EAS, see
Enterprise Unix shell behavior audit system-enterprise audit shell (EAS) and
Use eash to implement shell audit in Linux.

Due to the company's needs, I have performed secondary development based on EAS, and some enhancements are as follows:

1. Resolves every command executed by the user in the session, stores it in the database, and generates alerts for Dangerous commands;
2. Shell supports Chinese characters;
3. Support sz/Rz;
4. Support SCP to the audited server;
5. Record the user's source IP address and resolve the user's destination IP address;

I cannot remember other features. based on the shell log file containing control characters, the Command executed by the user is parsed. I did not find a proper solution on the Internet, and it took a lot of effort to solve the problem.