Operating System - HP-UX
1830340 Members
2296 Online
110001 Solutions
New Discussion

Re: ftpd message in syslog - how to remove

 
Camel_1
Valued Contributor

ftpd message in syslog - how to remove

Hi there,

The syslog keeps getting the following message

FTP server (Revision 1.1 Version wuftpd-2.
6.1(PHNE_34306) Mon Mar 13 11:15:29 GMT 2006) ready.

Everytime when there has a ftp connection establish, the above msg appear in the syslog. The following is the ftpd line in the /etc/inetd.conf.

ftp stream tcp6 nowait root /usr/lbin/ftpd ftpd -u 002

I have no idea how to stop this message, can someone give me some hints?

Thanks,

Simon
5 REPLIES 5
Peter Godron
Honored Contributor

Re: ftpd message in syslog - how to remove

Simon,
what does your /etc/syslog.conf file look like?

Have you tried changing to:
*.info;mail.none;local5.none /var/adm/syslog/syslog.log
local5.info /var/adm/syslog/ftp.log


See syslogd(1m) and syslog(3C)
Steven E. Protter
Exalted Contributor

Re: ftpd message in syslog - how to remove

Shalom,

You can look at inetd.conf and disable enhanced logging.

However, SOX requires logging of system access and you may have audit problems if you take this step.

Good Luck,

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
Bill Hassell
Honored Contributor

Re: ftpd message in syslog - how to remove

An alternative to having all these messages in syslog is to move the ftpd log to another file. Just change /etc/syslog.conf to something like this:

*.info;mail.none;local5.none /var/adm/syslog/syslog.log
local5.info /var/adm/syslog/ftp.log

The facility local5 is what ftpd uses for syslog messages. NOTE: syslog.conf does not allow spaces! Use tabs only. To remove a logging facility from syslog.log, you add the .none directive to the syslog.log line (as above).


Bill Hassell, sysadmin
Vasu Viswanadha
Advisor

Re: ftpd message in syslog - how to remove


Hi,

Append this word against 'syslog' entry in your '/etc/syslog.conf' file and restart the 'syslogd' .


ftp.none


It should read something like this



*.info;mail.none;ftp.none /var/adm/syslog/syslog.log


BR

Vasu
dattu_1
Regular Advisor

Re: ftpd message in syslog - how to remove

Hi simon,
Just check for -l entry in your /etc/inetd.conf Remove the entry if any

And then run inetd -c to re-read the configuration file.