Date: Fri, 5 Apr 2002 11:54:14 -0500 From: Ralph Dratman <ralph@maxsoft.com> To: gsouther@cox.net Cc: freebsd-questions@freebsd.org Subject: Re: How to get FTP to log? Message-ID: <v04210104b8d38563d8cd@[192.168.1.27]> In-Reply-To: <20020405061413.LLVY27315.fed1mtao02.cox.net@there> References: <v04210101b8d2ecb8f570@[192.168.1.27]> <20020405061413.LLVY27315.fed1mtao02.cox.net@there>
next in thread | previous in thread | raw e-mail | index | archive | help
Gary, Thank you so much. I didn't realize I had to restart syslogd. Also, the syslog.conf syntax is somewhat subtle. I had originally put ftp.* /var/log/ftpd.log at the end and that apparently was influenced by previous lines? Anyway it didn't work. I moved that line up and I now have the following active lines in syslogd.conf: ----------------------------------------------- *.err;kern.debug;auth.notice;mail.crit /dev/console *.notice;kern.debug;lpr.info;mail.crit;news.err /var/log/messages security.* /var/log/security mail.info /var/log/maillog ftp.debug /var/log/ftpd lpr.info /var/log/lpd-errs cron.* /var/log/cron *.err root *.notice;news.err root *.alert root *.emerg * !startslip *.* /var/log/slip.log !ppp *.* /var/log/ppp.log ----------------------------------------------- and after restarting syslogd it seems to be logging all ftp activity. Probably your method is better. I still don't fully understand the syntax but if it works I am satisfied! Best regards, Ralph ======================= >On Thursday 04 April 2002 10:57 pm, you wrote: >> I cannot seem to get my FTP transactions to log. I set up >> /etc/inetd.conf with ftpd -l -l, but nothing goes into >> /var/log/ftpd.log. >> >> I have anonymous FTP disabled. I want to log all FTP transactions. >> >> How can I make this happen? > >The ftpd doesn't actually write to the log files, the syslog daemon does. >So, you also need to modify your "/etc/syslog.conf" file, by adding something >like this: > >!ftpd >*.* /var/log/ftpd.log > >I usually add these lines after the default lines already in syslog.conf. >Then, you have to do a "kill -HUP <syslogd pid>" or "killall -HUP syslogd". >That should do it. > >Hope this helps, > >Gary > >> Thank you. >> >> Ralph To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?v04210104b8d38563d8cd>