From owner-freebsd-questions Fri Apr 5 8:54:29 2002 Delivered-To: freebsd-questions@freebsd.org Received: from www.dratman.com (pcp108019pcs.echryh01.nj.comcast.net [68.45.89.210]) by hub.freebsd.org (Postfix) with ESMTP id 8E01E37B41B for ; Fri, 5 Apr 2002 08:54:18 -0800 (PST) Received: from [192.168.1.27] (router.dratman.com [192.168.1.1]) by www.dratman.com (8.11.1/8.11.1) with ESMTP id g35GsGW79305; Fri, 5 Apr 2002 11:54:16 -0500 (EST) (envelope-from ralph@maxsoft.com) Mime-Version: 1.0 X-Sender: ralph99@popmail.voicenet.com Message-Id: In-Reply-To: <20020405061413.LLVY27315.fed1mtao02.cox.net@there> References: <20020405061413.LLVY27315.fed1mtao02.cox.net@there> Date: Fri, 5 Apr 2002 11:54:14 -0500 To: gsouther@cox.net From: Ralph Dratman Subject: Re: How to get FTP to log? Cc: freebsd-questions@freebsd.org Content-Type: text/plain; charset="us-ascii" ; format="flowed" Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Gary, Thank you so much. I didn't realize I had to restart syslogd. Also, the syslog.conf syntax is somewhat subtle. I had originally put ftp.* /var/log/ftpd.log at the end and that apparently was influenced by previous lines? Anyway it didn't work. I moved that line up and I now have the following active lines in syslogd.conf: ----------------------------------------------- *.err;kern.debug;auth.notice;mail.crit /dev/console *.notice;kern.debug;lpr.info;mail.crit;news.err /var/log/messages security.* /var/log/security mail.info /var/log/maillog ftp.debug /var/log/ftpd lpr.info /var/log/lpd-errs cron.* /var/log/cron *.err root *.notice;news.err root *.alert root *.emerg * !startslip *.* /var/log/slip.log !ppp *.* /var/log/ppp.log ----------------------------------------------- and after restarting syslogd it seems to be logging all ftp activity. Probably your method is better. I still don't fully understand the syntax but if it works I am satisfied! Best regards, Ralph ======================= >On Thursday 04 April 2002 10:57 pm, you wrote: >> I cannot seem to get my FTP transactions to log. I set up >> /etc/inetd.conf with ftpd -l -l, but nothing goes into >> /var/log/ftpd.log. >> >> I have anonymous FTP disabled. I want to log all FTP transactions. >> >> How can I make this happen? > >The ftpd doesn't actually write to the log files, the syslog daemon does. >So, you also need to modify your "/etc/syslog.conf" file, by adding something >like this: > >!ftpd >*.* /var/log/ftpd.log > >I usually add these lines after the default lines already in syslog.conf. >Then, you have to do a "kill -HUP " or "killall -HUP syslogd". >That should do it. > >Hope this helps, > >Gary > >> Thank you. >> >> Ralph To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message