topic Re: Tracking outgoing FTP in Operating System - HP-UX

Tracking outgoing FTP

dictum9 — Mon, 19 Dec 2005 17:06:56 GMT

What's the best way to track outgoing ftp accounts?

Same question for wu-ftp. Is there an option for wu-ftp?

Re: Tracking outgoing FTP

Sanjay_6 — Mon, 19 Dec 2005 17:38:20 GMT

I do not think, there is one,

You can probably think of writing a wrapper to the ftp command. That is a possibility. Else tracking outgoing ftp will be a difficult thing.

Hope this helps.

regds

Re: Tracking outgoing FTP

James R. Ferguson — Mon, 19 Dec 2005 17:41:08 GMT

Hi:

The Washington University version of 'ftp' is standard on current HP-UX versions.

Logging (out and in) is done to '/var/adm/syslog/xferlog'. To decipher this log's fields, see:

# man 5 xferlog

Regards!

...JRF...

Re: Tracking outgoing FTP

DCE — Mon, 19 Dec 2005 18:02:47 GMT

you can modify the command in /etc/inetd.conf with the -i and -o options to track incoming and outgoing ftp's

Dave

Re: Tracking outgoing FTP

Sanjay_6 — Mon, 19 Dec 2005 18:30:38 GMT

Hi,

xferlog will log any incomin ftp activity. similarly you can log incoming activity, but not the outgoing one.

Hope this helps.

regds

Re: Tracking outgoing FTP

James R. Ferguson — Mon, 19 Dec 2005 19:25:29 GMT

Hi:

Incoming as well as outgoing FTP transfers can most certainly be logged.

See the man pages for 'ftpd(1M)', 'ftpaccess(4)' and 'xferlog(5)' for configuration options.

Regards!

...JRF...

Re: Tracking outgoing FTP

Muthukumar_5 — Tue, 20 Dec 2005 01:00:35 GMT

Do you want to track down file transfer information or user names which they are using for ftp?

First can be done with xferlog setting. Second one you have to write down a wrapper to capture ftp execution with tee or script commands.

-Muthu