Monitoring FTP Activity 1

[mikri]

I am searching for a way to log the FTP Activity (Login User, Logintime, Datatransfere (Put or Get) Filename, Logout Time)
Is it possible in AIX 5.3?

THX
Mikri

PS: I know the Logintime, User and LOgouttime is in the wtmp File.

 

[columb]

I got this off an IBM site once...

How can I enable FTP logging?

A: FTP logging allows a system to generate a log to record the hostname, userid, date of access and listing of any transferred files. This is accomplished by monitoring activity of the ftpd daemon using the following steps:

Execute the smit inetdconf command (as root).

Select change/show characteristics of an inetd subserver.

Select FTP.

Change the service program command line arguments field to read 'ftpd -l' and press enter.

Edit the /etc/syslog.conf file and add the line:
daemon.info /tmp/ftp.log


Execute the command 'touch /tmp/ftp.log'.

Execute the command 'kill -1 <syslogd pid>', where <syslogd pid> is the PID of the syslogd daemon. This will cause the syslogd daemon to re-read its configuration file.
Now all of the FTP activity on your system should be listed in /tmp/ftp.log.

But I wouldn't put the log in /tmp!

Ceci n'est pas une signature
Columb Healy

 

[jpor2003]

I would consider creating the log in /var/adm, that way only root admins can access it.