FTP: Logging activity

[TheJuiceman]

Hey gang,

Is there a way to log FTP activity? There is the information that ftpd throws to the syslog, but that does not record everything (like stuff being used with windows software like Rapid FTP, etc). Is there a way to track this? Thanks.

[A. Clay Stephenson]

You can enable the logging of inetd. Man inetd for information on how to toggle the logging on or off or how to enable it at boot. You are going to get a lot of logginhg this way but it won't be restricted to ftpd.

[A. Clay Stephenson]

Plan B.

Download the source for wu_ftpd from any of the HP-UX Porting Centre's and modify it to log anything you want.

[James R. Ferguson]

Hi:

See also, the manpages for 'ftpd(1M)'. I partiularly like logging in the 'xferlog' file.

Regards!

...JRF...

[TheJuiceman]

I am wanting to get a listing of all of our ftp activity prior to going to wu-ftp (since this is a production system, I want to have all my ducks in a row first).

We have ftp set as "ftpd -l" for logging in /etc/inetd.conf. However, we are not getting EVERYTHING that is being ftp'd in or out (I can use a windows product like RapidFTP and ftp a file and it does not appear in the syslog). Are there some other options I can put in inetd.conf to get ALL ftp traffic (or is there some other method of getting this information)? Thanks.

[James R. Ferguson · Accepted solution]

Hi (again):

The 'ftpd' daemon can use '-i' and 'o' to log incoming and outgoing file transfers in the 'xferlog' or to the 'syslog'. Logging can also be driven by the 'ftpaccess' file. See the manpages for 'ftpd(1M)' and 'ftpaccess(4)' for setup options.

Regards!

...JRF...

[TheJuiceman]

Thanks again!!!