🚀 go-pugleaf

Following up to my own post.. I typo'ed the command line argument..

In article <93@antimatr.hou.tx.us>, markw@antimatr.hou.tx.us (Mark Whetzel) writes:
> According to the RT TCP/IP book SC23-2005-1, the -i option to the
                                                    ^  a -l  (for logging!)
There is also a -d flag for debugging.

The inetd.conf line SHOULD read:
ftp	stream	tcp	nowait	root	/usr/lpp/tcpip/etc/ftpd	ftpd -ld

> and issue a kill -HUP to the inetd process. to re-read the config file.
 
> Logging is performed via the syslog function call, and the /etc/syslog.conf
> file will have to be altered to actually save the logged data.
> Unfortunately, the book does not indicate the facility and error level
> that ftpd uses to perform it's logging, so a litte experimentation will
> have to be performed.

A little experimentation reveals that the -l flag only shows that a FTP
connection was established, but no other details.  No account info, nor
any file transfer info.

BUT.. the -d flag to the ftpd  DOES cause a great deal of info to be
sent to the syslog, INCLUDING any userid and passwords specified, as
well as the direction and filenames of files sent/received.

Add these lines to /etc/syslog.conf for FTP logging.
# ftp -l logs here
daemon.info		/usr/spool/daemon.info
#
# ftp -d logs here
daemon.debug		/usr/spool/daemon.debug

Sorry about the typo on the earlier command line flag.

Later,
markw
-- 
M. Whetzel 
Home: markw@antimatr.hou.tx.us        | IBM RT/125 running AIX 2.2.1 
UUCP ..!uhnix1!lobster!antimatr!markw