telenet connections/syslog

[Loretta Marshall]

I get this when they use qvtnet but not when they use EWAN.
Aug 30 10:27:43 apollo ftpd[4572]: connection from sub202212.ColState.EDU at Wed
Aug 30 10:27:43 2000
Aug 30 10:27:43 apollo ftpd[4572]: FTP LOGIN FROM sub202212.ColState.EDU, username
Aug 30 10:27:43 apollo ftpd[4572]: PORT
Aug 30 10:27:56 apollo ftpd[4572]: User username logged out

[Rita C Workman]

OK...I'm not real familiar with qvtnet, but I remember something about EWAN being a freeware telnet (...maybe..)
It looks like your logging is turned on for inetd. Is that your question? If you want it off you can change your /etc/rc.config.d/netdaemons file and turn off inetd. Then just do a /usr/sbin/inetd -c

But I'm not sure what your question is....

[Loretta Marshall]

Sorry, my question was from an earlier post. I was asking if
anyone noticed when users connect through qvtnet it would log the
connection in syslog but when using EWAN it would not log anything
in syslog. I would like it to log for either connection. I just assumed it
would log whenever anyone would telenet in.

[CHRIS ANORUO · Accepted solution]

vi /etc/inetd.conf and at the end of the ftp line add ...ftpd (-lv). It is okay to unhash the line export INETD_ARGS = -l
in /etc/rc.config.d/netdaemons file and reinitialize inetd (inetd -c)

[Rita C Workman]

I've never tried this, but I was wondering if EWAN comes via a particular port, and then which port it hits.
Since I believe it's telnet software it is probably hitting that port. So you may be able to turn the logging on via /etc/inetd.conf file by putting a -l at the end of the telnet line.
But double check on which port EWAN is hitting....

Just a thought,

[Loretta Marshall]

Okay, well I did the following and was still unsuccessful:

changed /etc/inetd.conf - added ftpd -lv
/etc/rc.config.d/netdaemons INETD_ARGS = -l

even tried the -l at the end of the telnet line - and got a strange error when logging in.

[CHRIS ANORUO]

lORETTA,

DON'T USE -L IN FRONT OF THE TELNET LINE IN /ETC/INETD.CONF.
YOU CAN USE (-b /etc/issue) FOR MESSAGE AND SECURITY

[CHRIS ANORUO]

LORETTA,

DON'T USE -L IN FRONT OF THE TELNET LINE IN /ETC/INETD.CONF.
YOU CAN USE (-b /etc/issue) FOR MESSAGE AND SECURITY

[Tim Malnati]

Hopefully I can reduce some of the confusion here. Your initial post indicated that both qvtnet and EWAN were entering the machine via telnet. It is clear from your syslog entries that qvtnet is connecting via ftp instead. You appear to be logging the way you want on ftp just fine, so don't adjust it.

It appears that what you really want is user accounting. The preferred method is by using the wtmp and btmp accounting files. This can be done easily by simply creating these files with 'touch /var/adm/wtmp' and 'touch /var/adm/btmp'. Keep an eye on these files where they will grow. The internal formatting of the utmp, wtmp, and btmp files will consume a lot less space than narritive lines in syslog though. Use the fwtmp command to convert the contents of these files for report output, etc.