<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: logging ftp session information in Operating System - HP-UX</title>
    <link>https://community.hpe.com/t5/operating-system-hp-ux/logging-ftp-session-information/m-p/3899764#M544741</link>
    <description>Hi Khashru,&lt;BR /&gt;&lt;BR /&gt;Modify /etc/inetd.conf file:&lt;BR /&gt;&lt;BR /&gt;ftp          stream tcp nowait root /usr/lbin/ftpd      ftpd -a -l -i -o -u002&lt;BR /&gt;&lt;BR /&gt;# inetd -c&lt;BR /&gt;&lt;BR /&gt;# man ftpd&lt;BR /&gt;&lt;BR /&gt;# more /var/adm/syslog/xferlog&lt;BR /&gt;&lt;BR /&gt;rgs,&lt;BR /&gt;&lt;BR /&gt;</description>
    <pubDate>Fri, 17 Nov 2006 06:23:22 GMT</pubDate>
    <dc:creator>rariasn</dc:creator>
    <dc:date>2006-11-17T06:23:22Z</dc:date>
    <item>
      <title>logging ftp session information</title>
      <link>https://community.hpe.com/t5/operating-system-hp-ux/logging-ftp-session-information/m-p/3899762#M544739</link>
      <description>I want to enable details ftp login in my hpus 11i server. I need ip of the machine who is doing the ftp.</description>
      <pubDate>Thu, 16 Nov 2006 17:58:59 GMT</pubDate>
      <guid>https://community.hpe.com/t5/operating-system-hp-ux/logging-ftp-session-information/m-p/3899762#M544739</guid>
      <dc:creator>Khashru</dc:creator>
      <dc:date>2006-11-16T17:58:59Z</dc:date>
    </item>
    <item>
      <title>Re: logging ftp session information</title>
      <link>https://community.hpe.com/t5/operating-system-hp-ux/logging-ftp-session-information/m-p/3899763#M544740</link>
      <description>I have added -lv in inetd.conf. but it is only giving me ip address when a ftp session is ok. I need to find out Ip address for unsuccessful login.</description>
      <pubDate>Thu, 16 Nov 2006 18:16:22 GMT</pubDate>
      <guid>https://community.hpe.com/t5/operating-system-hp-ux/logging-ftp-session-information/m-p/3899763#M544740</guid>
      <dc:creator>Khashru</dc:creator>
      <dc:date>2006-11-16T18:16:22Z</dc:date>
    </item>
    <item>
      <title>Re: logging ftp session information</title>
      <link>https://community.hpe.com/t5/operating-system-hp-ux/logging-ftp-session-information/m-p/3899764#M544741</link>
      <description>Hi Khashru,&lt;BR /&gt;&lt;BR /&gt;Modify /etc/inetd.conf file:&lt;BR /&gt;&lt;BR /&gt;ftp          stream tcp nowait root /usr/lbin/ftpd      ftpd -a -l -i -o -u002&lt;BR /&gt;&lt;BR /&gt;# inetd -c&lt;BR /&gt;&lt;BR /&gt;# man ftpd&lt;BR /&gt;&lt;BR /&gt;# more /var/adm/syslog/xferlog&lt;BR /&gt;&lt;BR /&gt;rgs,&lt;BR /&gt;&lt;BR /&gt;</description>
      <pubDate>Fri, 17 Nov 2006 06:23:22 GMT</pubDate>
      <guid>https://community.hpe.com/t5/operating-system-hp-ux/logging-ftp-session-information/m-p/3899764#M544741</guid>
      <dc:creator>rariasn</dc:creator>
      <dc:date>2006-11-17T06:23:22Z</dc:date>
    </item>
    <item>
      <title>Re: logging ftp session information</title>
      <link>https://community.hpe.com/t5/operating-system-hp-ux/logging-ftp-session-information/m-p/3899765#M544742</link>
      <description>Sorry,&lt;BR /&gt;&lt;BR /&gt;and&lt;BR /&gt;&lt;BR /&gt;# grep ftp /var/adm/syslog/syslog.log&lt;BR /&gt;&lt;BR /&gt;rgs,</description>
      <pubDate>Fri, 17 Nov 2006 06:34:50 GMT</pubDate>
      <guid>https://community.hpe.com/t5/operating-system-hp-ux/logging-ftp-session-information/m-p/3899765#M544742</guid>
      <dc:creator>rariasn</dc:creator>
      <dc:date>2006-11-17T06:34:50Z</dc:date>
    </item>
    <item>
      <title>Re: logging ftp session information</title>
      <link>https://community.hpe.com/t5/operating-system-hp-ux/logging-ftp-session-information/m-p/3899766#M544743</link>
      <description>That will give me information about successful login. I need Ip address if a login fails.</description>
      <pubDate>Sun, 19 Nov 2006 17:11:17 GMT</pubDate>
      <guid>https://community.hpe.com/t5/operating-system-hp-ux/logging-ftp-session-information/m-p/3899766#M544743</guid>
      <dc:creator>Khashru</dc:creator>
      <dc:date>2006-11-19T17:11:17Z</dc:date>
    </item>
    <item>
      <title>Re: logging ftp session information</title>
      <link>https://community.hpe.com/t5/operating-system-hp-ux/logging-ftp-session-information/m-p/3899767#M544744</link>
      <description>ftpd does not 'login' so there is no record of failed attempts to gain access. ftpd uses PAM to authenticate but there is no login process run.</description>
      <pubDate>Sun, 19 Nov 2006 18:55:22 GMT</pubDate>
      <guid>https://community.hpe.com/t5/operating-system-hp-ux/logging-ftp-session-information/m-p/3899767#M544744</guid>
      <dc:creator>Bill Hassell</dc:creator>
      <dc:date>2006-11-19T18:55:22Z</dc:date>
    </item>
    <item>
      <title>Re: logging ftp session information</title>
      <link>https://community.hpe.com/t5/operating-system-hp-ux/logging-ftp-session-information/m-p/3899768#M544745</link>
      <description>I am getting message in syslog that someone is using one user name to do a ftp and rejected. I need to find out from which machine it is happening.</description>
      <pubDate>Sun, 19 Nov 2006 19:07:52 GMT</pubDate>
      <guid>https://community.hpe.com/t5/operating-system-hp-ux/logging-ftp-session-information/m-p/3899768#M544745</guid>
      <dc:creator>Khashru</dc:creator>
      <dc:date>2006-11-19T19:07:52Z</dc:date>
    </item>
    <item>
      <title>Re: logging ftp session information</title>
      <link>https://community.hpe.com/t5/operating-system-hp-ux/logging-ftp-session-information/m-p/3899769#M544746</link>
      <description>&lt;BR /&gt;&lt;BR /&gt;Hi,&lt;BR /&gt;&lt;BR /&gt;Normally FTP logs IP addresses on the syslog. Can you pls post the syslog o/p ?&lt;BR /&gt;&lt;BR /&gt;They read some thing like this&lt;BR /&gt;&lt;BR /&gt;[IP Addrss ]  username .....&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;BR&lt;BR /&gt;&lt;BR /&gt;Vasu</description>
      <pubDate>Mon, 20 Nov 2006 02:31:56 GMT</pubDate>
      <guid>https://community.hpe.com/t5/operating-system-hp-ux/logging-ftp-session-information/m-p/3899769#M544746</guid>
      <dc:creator>Vasu Viswanadha</dc:creator>
      <dc:date>2006-11-20T02:31:56Z</dc:date>
    </item>
    <item>
      <title>Re: logging ftp session information</title>
      <link>https://community.hpe.com/t5/operating-system-hp-ux/logging-ftp-session-information/m-p/3899770#M544747</link>
      <description>I have ftp configured in /etc/inetd.conf with just the -a option and if a user fails to login correctly, the following message is recorded for each failed attempt:&lt;BR /&gt; &lt;BR /&gt;...mycpu ftpd[18496]: REPEATED LOGIN FAILURES FROM some-domain-or-IP&lt;BR /&gt; &lt;BR /&gt;Be sure that your /etc/ftp/ftpaccess file has configured logging:&lt;BR /&gt; &lt;BR /&gt;loginfails 2&lt;BR /&gt;log commands real&lt;BR /&gt;log transfers anonymous,real inbound,outbound</description>
      <pubDate>Mon, 20 Nov 2006 09:15:04 GMT</pubDate>
      <guid>https://community.hpe.com/t5/operating-system-hp-ux/logging-ftp-session-information/m-p/3899770#M544747</guid>
      <dc:creator>Bill Hassell</dc:creator>
      <dc:date>2006-11-20T09:15:04Z</dc:date>
    </item>
    <item>
      <title>Re: logging ftp session information</title>
      <link>https://community.hpe.com/t5/operating-system-hp-ux/logging-ftp-session-information/m-p/3899771#M544748</link>
      <description>Hello!&lt;BR /&gt;&lt;BR /&gt;I usually use the packet sniffer (like ethereal) and follow the TCP stream of the ftp packets.&lt;BR /&gt;Is good for software debug.&lt;BR /&gt;&lt;BR /&gt;regards</description>
      <pubDate>Thu, 07 Dec 2006 12:37:55 GMT</pubDate>
      <guid>https://community.hpe.com/t5/operating-system-hp-ux/logging-ftp-session-information/m-p/3899771#M544748</guid>
      <dc:creator>Alpha977</dc:creator>
      <dc:date>2006-12-07T12:37:55Z</dc:date>
    </item>
    <item>
      <title>Re: logging ftp session information</title>
      <link>https://community.hpe.com/t5/operating-system-hp-ux/logging-ftp-session-information/m-p/3899772#M544749</link>
      <description>not sure about hpus, but on solaris10 my failed attempts show as &lt;BR /&gt;&lt;BR /&gt;dmesg&lt;BR /&gt;Dec 28 20:47:13 host01 ftpd[8485]: [ID 265846 daemon.notice] repeated login failures from 172.20.1.2 [172.20.1.2]&lt;BR /&gt;&lt;BR /&gt;or for that days logs&lt;BR /&gt;more /var/adm/messages&lt;BR /&gt;Dec 28 20:47:13 host01 ftpd[8485]: [ID 265846 daemon.notice] repeated login fail&lt;BR /&gt;ures from 172.20.1.2 [172.20.1.2]&lt;BR /&gt;&lt;BR /&gt;you should be able to grep search them&lt;BR /&gt;&lt;BR /&gt;Hope this answers your question, thanks&lt;BR /&gt;Wien lam</description>
      <pubDate>Thu, 28 Dec 2006 15:03:10 GMT</pubDate>
      <guid>https://community.hpe.com/t5/operating-system-hp-ux/logging-ftp-session-information/m-p/3899772#M544749</guid>
      <dc:creator>wien lam</dc:creator>
      <dc:date>2006-12-28T15:03:10Z</dc:date>
    </item>
  </channel>
</rss>

