topic Re: FTP: Logging activity in Operating System - HP-UX

FTP: Logging activity

TheJuiceman — Tue, 24 Jul 2007 18:52:26 GMT

Hey gang,

Is there a way to log FTP activity? There is the information that ftpd throws to the syslog, but that does not record everything (like stuff being used with windows software like Rapid FTP, etc). Is there a way to track this? Thanks.

Re: FTP: Logging activity

A. Clay Stephenson — Tue, 24 Jul 2007 18:59:38 GMT

You can enable the logging of inetd. Man inetd for information on how to toggle the logging on or off or how to enable it at boot. You are going to get a lot of logginhg this way but it won't be restricted to ftpd.

Re: FTP: Logging activity

A. Clay Stephenson — Tue, 24 Jul 2007 19:02:12 GMT

Plan B.

Download the source for wu_ftpd from any of the HP-UX Porting Centre's and modify it to log anything you want.

Re: FTP: Logging activity

James R. Ferguson — Tue, 24 Jul 2007 19:04:08 GMT

Hi:

See also, the manpages for 'ftpd(1M)'. I partiularly like logging in the 'xferlog' file.

Regards!

...JRF...

Re: FTP: Logging activity

TheJuiceman — Fri, 27 Jul 2007 18:57:57 GMT

I am wanting to get a listing of all of our ftp activity prior to going to wu-ftp (since this is a production system, I want to have all my ducks in a row first).

We have ftp set as "ftpd -l" for logging in /etc/inetd.conf. However, we are not getting EVERYTHING that is being ftp'd in or out (I can use a windows product like RapidFTP and ftp a file and it does not appear in the syslog). Are there some other options I can put in inetd.conf to get ALL ftp traffic (or is there some other method of getting this information)? Thanks.

Re: FTP: Logging activity

James R. Ferguson — Fri, 27 Jul 2007 19:18:19 GMT

Hi (again):

The 'ftpd' daemon can use '-i' and 'o' to log incoming and outgoing file transfers in the 'xferlog' or to the 'syslog'. Logging can also be driven by the 'ftpaccess' file. See the manpages for 'ftpd(1M)' and 'ftpaccess(4)' for setup options.

Regards!

...JRF...

Re: FTP: Logging activity

TheJuiceman — Fri, 24 Aug 2007 17:23:37 GMT

Thanks again!!!