Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 12 Mar 2003 11:20:42 -0600
From:      Mike Meyer <mwm-dated-1047921643.2e5534@mired.org>
To:        Chris P <freebsd@rawfire.torche.com>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: ftp logging question
Message-ID:  <15983.27754.289367.924208@guru.mired.org>
In-Reply-To: <Pine.BSF.4.44.0303120151150.64416-100000@rawfire.torche.com>
References:  <Pine.BSF.4.44.0303120151150.64416-100000@rawfire.torche.com>

next in thread | previous in thread | raw e-mail | index | archive | help
In <Pine.BSF.4.44.0303120151150.64416-100000@rawfire.torche.com>, Chris P <freebsd@rawfire.torche.com> typed:
> Anyone know how ftp's get logged?  I do a last -10 and see a user did a 2
> hour ftp, yet he has no files in his home.  So I am curious what he
> downloaded/uploaded.  Uploading is easy to poke around and look as his
> access is limited as to where he can write to.  Downloading on the other
> hand is an open book.  He's a trusted user, but if others poke around w/
> accounts, I'd like to be able to check what they are downloading.  Oh, and
> nothing shows up in his home dir loggin (.history)  I think .history only
> shows things when they are actually logged in via telnet/ssh.
> I've poked around /var/logs, and didnt see any ftp logging.  Maybe its an
> option I missed? Maybe nothing is being logged? Dunno.. a little education
> would be appreciated!  Thanks!

Depends on which ftp daemon you are running. The one that comes with
the system - /usr/libexec/ftpd - needs -ll - that's two els - to log
each file transfer. With just one l, it only logs session
information.

	<mike

-- 
Mike Meyer <mwm@mired.org>		http://www.mired.org/consulting.html
Independent WWW/Perforce/FreeBSD/Unix consultant, email for more information.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?15983.27754.289367.924208>