ftp logs

[Waqar Razi]

I want to check whois transferring what from hpux servers using ftp, how can I check that? Is there any log file for ftp activity?

[Steven E. Protter]

Shalom,

standard hp-ux install uses wsftpd. Configuration for this daemon is controlled by the internet services daemon inetd.conf in /etc/

inetd can be configured with logging, which normally goes to /var/adm/syslog

You can break out the ftp logs or have them merely be part of syslog.

SEP

[James R. Ferguson · Accepted solution]

Hi wagar:

You can track the FTP transfers in the '/var/adm/syslog/xferlog' file by setting up the '/etc/ftpd/ftpaccess' file to contain the lines:

log commands real,guest,anonymous
log transfers real,guest,anonymous inbound,outbound

In your '/etc/inetd.conf' your FTP daemon arguments should look like:

ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l -a

See the manpages for 'ftpd(1M)', 'ftpaccess(4)' and 'xferlog(5)'

Regards!

...JRF...

[Sani]

Hi Waqar ,

To enable "xferlog" ,
1) please edit /etc/inetd.conf and put the entry for ftpd as follows ,

ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l -i -o

2) restart services
#inetd -c

3) now all ftp sessions will be logged in the file "/var/adm/syslog/xferlog"


Regards
Sani