ftpd issue

[Otto Folprecht]

Hi, I keep getting in the system log ftpd [some process number] FTP session closed. This message is coming up every second. Is there some runaway process. The OS is 11.11. THX Otto

[Sridhar Bhaskarla · Accepted solution]

Hi,

ftpd is spawned by inetd. Try 'ps -ef|grep ftpd|wc -l' and see how many sessions are currently used.

Yes. There is a good chance that a program or a script (not necessarily on the local host) may be trying to run ftp continuously. Enable "inetd" with connection logging' (with the command 'inetd -l'). Then you will see an ftp login with the connection details (like connection from xxxxx) associated with that "some process number". Then you can troubleshoot from there.

-Sri

[Michael Schulte zur Sur]

Hi,

perhaps you have started ftpd with the logging option and the ftpd logs any ftp.
You may also use -L to see, what it is doing on your machine and thereby find out, who is doing this.

greetings,

Michael

[Otto Folprecht]

THX for the tip. How do I kill now inetd as it is creating so many uneeded lines in the syslog. THX Otto

[Sridhar Bhaskarla]

Hi,

-l is a toggle switch. You can run "inetd -l" again to disable logging. You should see a message "connection logging disabled" in syslog.log.

-Sri

[Michael Schulte zur Sur]

Hi Otto,

please do not kill inetd! This will have some very drastic effects.

Michael