ftp logs

[akshata bv]

hi
i am pretty new to unix. i would like to know where to see for ftp logs. and whether the user has logged in successfully or how many unsuccesful attempts he has made.

[Peter Godron]

Hi,
and welcome to the forums.

The commands last and lastb will show you the user info you wanted. See "man last".

What sort of ftp log information are you after ?

Please also read:
http://forums1.itrc.hp.com/service/forums/helptips.do?#33

[rariasn]

Hi,

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1077043

rgs

[siva0123]

Hope ,

Even /var/adm/syslog/syslog.log logs the ftp connections

Thanks,
siva

[akshata bv]

Thank you for your response. I checked in syslog but it doesnt say whether the user has successful in his attempt to login or not. 3 logind it should get locked i want to know those details. But last was good enough. Is there a way I can see all the logins of a month?

[siva0123]

Akshata ,

If you havent rebooted the system for the past one month , then

grep -i ftp < /var/adm/syslog/syslog.log will give all the ftp sessions for the month.

If you have rebooted only once ,

Then
grep -i ftp < /var/adm/syslog/syslog.log
and
grep -i ftp < /var/adm/syslog/OLDsyslog.log

will give you the sessions for the last month.

Thanks
Siva

[Vasu Viswanadha]

Hi,

Check your '/etc/inetd.conf' if logging is enabled in the first place.

It should read something like this.

#ftp stream tcp nowait root /usr/sbin/ftpd ftpd -l

" -l" is the minimum loggign level.

It is possible to redirect / increase the logging level of 'ftpd'. Check 'man ftpd' for more information.

Finally, run 'tail -f /var/adm/syslog/syslog.log' and one terminal and do a local ftp on another terminal and see if it is getting logged.

BR

Vasu