From owner-freebsd-questions Wed Jun 4 17:01:08 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.5/8.8.5) id RAA07085 for questions-outgoing; Wed, 4 Jun 1997 17:01:08 -0700 (PDT) Received: from matrix.42.org (sec@matrix.42.org [192.68.213.129]) by hub.freebsd.org (8.8.5/8.8.5) with SMTP id RAA07067 for ; Wed, 4 Jun 1997 17:01:02 -0700 (PDT) Received: (from sec@localhost) by matrix.42.org (8.6.12/8.6.12) id CAA15857; Thu, 5 Jun 1997 02:00:52 +0200 To: freebsd-questions@freebsd.org Path: sec From: sec@42.org (Stefan `Sec` Zehl) Newsgroups: muc.lists.freebsd.questions Subject: Re: How to 'watch' an FTP User Date: 5 Jun 1997 02:00:50 +0200 Organization: Internet@home Lines: 22 Message-ID: References: <19970603173741.14916@scsn.net> X-Newsreader: slrn (0.9.3.0-2 BETA UNIX) Sender: owner-questions@freebsd.org X-Loop: FreeBSD.org Precedence: bulk In article <19970603173741.14916@scsn.net>, Donald J. Maddox wrote: > The 'watch' command is very handy for observing what someone logged into > your machine is doing, as they do it. Is there an analogous program for > watching what ftp users logged in to the system are doing? Or, is there a > way of using 'watch' for this that I've missed? I changed the line in /etc/inetd.conf to: ftp stream tcp nowait root /usr/libexec/ftpd ftpd -d -l -l and in /etc/syslog.conf: ftp.debug /var/log/ftp So i can see every 'movement' made by the ftp 'users' - it generates a lot of data though, so you shouldn't forget to rotate the logfile every once in a while :) CU & HTH, Sec -- Fuer die Raupe ist es das Ende der Welt, Fuer den Rest der Welt ist es ein Schmetterling Error 0: No error