topic Re: logging ftp sessions in Operating System - HP-UX

logging ftp sessions

anoop_10 — Tue, 07 Oct 2008 16:30:24 GMT

Hi,

I need to enable logging for all the ftp session in my server, is it possible? I saw some thread which explains that need to add ftpd -l -o -i option in /etc/inetd.conf and then inetd –c.But after putting this entry also am not able to see any files named
/var/adm/syslog/xferlog.. I am waiting for your valid suggestions.

Thanks
Anoop

Re: logging ftp sessions

Ivan Krastev — Tue, 07 Oct 2008 16:36:07 GMT

Do you have /etc/ftpd/ftpaccess file? What is you OS and ftpd version?
Check also for any ftp/syslog patches.

regards,
ivan

Re: logging ftp sessions

James R. Ferguson — Tue, 07 Oct 2008 16:42:08 GMT

Hi:

The '-a' switch enables the 'xferlog'. Your '/etc/inetd.conf' entry should look something like:

ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l -a

Regards!

...JRF...

Re: logging ftp sessions

Tim Nelson — Tue, 07 Oct 2008 16:49:18 GMT

And you need something like this in your /etc/ftpd/ftpaccess file

log transfers anon,real,guest inbound,outbound

Re: logging ftp sessions

anoop_10 — Tue, 07 Oct 2008 18:40:42 GMT

Hi ,

Thanks for the suggestion,

Please find the details,

# swlist -l patch |grep -i ftp
# PHKL_24278 1.0 Softpower enablement for bladed servers
# PHNE_32825 1.0 bootpd(1M)/DHCP, tftp(1) and tftpd(1M) patch
# PHNE_34544 1.0 ftpd(1M) and ftp(1) patch
# uname -a
HP-UX scom03 B.11.11 U 9000/800 3118647217 unlimited-user license
# pwd
/etc/ftpd
# ll
total 0
dr-xr--r-- 2 bin bin 96 Nov 15 2000 ftp-exec
dr-xr--r-- 2 bin bin 96 Nov 15 2000 pids

# more /etc/inetd.conf

## Configured using SAM by root on Thu May 4 03:25:41 2006
## Configured using SAM by root on Wed Aug 13 17:15:27 2008
##
#
# @(#)B.11.11_LRinetd.conf $Revision: 1.24.214.3 $ $Date: 97/09/10 14:50:49 $
#
# Inetd reads its configuration information from this file upon execution
# and at some later time if it is reconfigured.
#
# A line in the configuration file has the following fields separated by
# tabs and/or spaces:
#
# service name as in /etc/services
# socket type either "stream" or "dgram"
# protocol as in /etc/protocols
# wait/nowait only applies to datagram sockets, stream
# sockets should specify nowait
# user name of user as whom the server should run
# server program absolute pathname for the server inetd will
# execute
# server program args. arguments server program uses as they normally
# are starting with argv[0] which is the name of
# the server.
#
# See the inetd.conf(4) manual page for more information.
##

##
#
# ARPA/Berkeley services
#
##
ftp stream tcp nowait root /usr/lbin/ftpd ftpd -dl -i
telnet stream tcp nowait root /usr/lbin/telnetd telnetd

# Before uncommenting the "tftp" entry below, please make sure
# that you have a "tftp" user in /etc/passwd. If you don't
# have one, please consult the tftpd(1M) manual entry for
# information about setting up this service.

How do I check ftpd version,and there is no such files called ftpacess.

Thanks
Anoop

Re: logging ftp sessions

anoop_10 — Wed, 08 Oct 2008 12:41:23 GMT

Hi ,

Its done,I have copied ftpaccess file from
/usr/newconfig/etc/ftpd/examples.Now am able to see the xferlog.

Thanks for the support

Anoop