From owner-freebsd-questions Wed Mar 12 9:20:46 2003 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CD0C437B401 for ; Wed, 12 Mar 2003 09:20:44 -0800 (PST) Received: from mired.org (ip68-97-54-220.ok.ok.cox.net [68.97.54.220]) by mx1.FreeBSD.org (Postfix) with SMTP id BABC143F75 for ; Wed, 12 Mar 2003 09:20:43 -0800 (PST) (envelope-from mwm-dated-1047921643.2e5534@mired.org) Received: (qmail 45156 invoked from network); 12 Mar 2003 17:20:43 -0000 Received: from localhost.mired.org (HELO guru.mired.org) (127.0.0.1) by localhost.mired.org with SMTP; 12 Mar 2003 17:20:43 -0000 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <15983.27754.289367.924208@guru.mired.org> Date: Wed, 12 Mar 2003 11:20:42 -0600 To: Chris P Cc: freebsd-questions@FreeBSD.ORG Subject: Re: ftp logging question In-Reply-To: References: X-Mailer: VM 7.07 under 21.1 (patch 14) "Cuyahoga Valley" XEmacs Lucid X-face: "5Mnwy%?j>IIV\)A=):rjWL~NB2aH[}Yq8Z=u~vJ`"(,&SiLvbbz2W`; h9L,Yg`+vb1>RG% *h+%X^n0EZd>TM8_IB;a8F?(Fb"lw'IgCoyM.[Lg#r\ From: Mike Meyer X-Delivery-Agent: TMDA/0.71 (Hoop, Jr.) Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG In , Chris P typed: > Anyone know how ftp's get logged? I do a last -10 and see a user did a 2 > hour ftp, yet he has no files in his home. So I am curious what he > downloaded/uploaded. Uploading is easy to poke around and look as his > access is limited as to where he can write to. Downloading on the other > hand is an open book. He's a trusted user, but if others poke around w/ > accounts, I'd like to be able to check what they are downloading. Oh, and > nothing shows up in his home dir loggin (.history) I think .history only > shows things when they are actually logged in via telnet/ssh. > I've poked around /var/logs, and didnt see any ftp logging. Maybe its an > option I missed? Maybe nothing is being logged? Dunno.. a little education > would be appreciated! Thanks! Depends on which ftp daemon you are running. The one that comes with the system - /usr/libexec/ftpd - needs -ll - that's two els - to log each file transfer. With just one l, it only logs session information. http://www.mired.org/consulting.html Independent WWW/Perforce/FreeBSD/Unix consultant, email for more information. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message