Thread View: comp.sys.ibm.pc.rt
3 messages
3 total messages
Started by Gareth B Smith
Tue, 26 Jan 1993 13:20
Anonymous ftp on an RT
Author: Gareth B Smith
Date: Tue, 26 Jan 1993 13:20
Date: Tue, 26 Jan 1993 13:20
14 lines
981 bytes
981 bytes
I used the shell script to create an anonymous ftp account on my RT. Is there any way I can keep track on this account, such as when someone logged in, where from, what did they give as the password, etc. anything at all really. Any ideas? Thanks, Gareth ______________________________________________________________________________ Gareth Smith | Department of Computing, University of Lancaster, gbs@comp.lancs.ac.uk | Bailrigg, Lancaster, LA1 4YR , U.K. ...!mcvax!ukc!dcl-cs!gbs | FAX:+44 (0)524 381707 PHONE:+44 (0)524 65201 Ex3793 ______________________________________________________________________________
Re: Anonymous ftp on an RT
Author: Mark Whetzel
Date: Wed, 27 Jan 1993 12:17
Date: Wed, 27 Jan 1993 12:17
27 lines
1649 bytes
1649 bytes
In article <1993Jan26.132008.19373@comp.lancs.ac.uk>, gbs@comp.lancs.ac.uk (Gareth B Smith) writes: > I used the shell script to create an anonymous ftp account on my RT. > Is there any way I can keep track on this account, such as > when someone logged in, where from, what did they give as the password, > etc. anything at all really. According to the RT TCP/IP book SC23-2005-1, the -i option to the ftpd command turns on logging. All logging of ftp traffic. Edit the /etc/inetd.conf file, and alter the line that reads: ftp stream tcp nowait root /usr/lpp/tcpip/etc/ftpd ftpd to read: ftp stream tcp nowait root /usr/lpp/tcpip/etc/ftpd ftpd -i and issue a kill -HUP to the inetd process. to re-read the config file. Logging is performed via the syslog function call, and the /etc/syslog.conf file will have to be altered to actually save the logged data. Unfortunately, the book does not indicate the facility and error level that ftpd uses to perform it's logging, so a litte experimentation will have to be performed. -- M. Whetzel Home: markw@antimatr.hou.tx.us | IBM RT/125 running AIX 2.2.1 UUCP ..!uhnix1!lobster!antimatr!markw
ftp logging on an RT (Was: anonymous ftp on an RT)
Author: Mark Whetzel
Date: Thu, 28 Jan 1993 04:39
Date: Thu, 28 Jan 1993 04:39
41 lines
2165 bytes
2165 bytes
Following up to my own post.. I typo'ed the command line argument..
In article <93@antimatr.hou.tx.us>, markw@antimatr.hou.tx.us (Mark Whetzel) writes:
> According to the RT TCP/IP book SC23-2005-1, the -i option to the
^ a -l (for logging!)
There is also a -d flag for debugging.
The inetd.conf line SHOULD read:
ftp stream tcp nowait root /usr/lpp/tcpip/etc/ftpd ftpd -ld
> and issue a kill -HUP to the inetd process. to re-read the config file.
> Logging is performed via the syslog function call, and the /etc/syslog.conf
> file will have to be altered to actually save the logged data.
> Unfortunately, the book does not indicate the facility and error level
> that ftpd uses to perform it's logging, so a litte experimentation will
> have to be performed.
A little experimentation reveals that the -l flag only shows that a FTP
connection was established, but no other details. No account info, nor
any file transfer info.
BUT.. the -d flag to the ftpd DOES cause a great deal of info to be
sent to the syslog, INCLUDING any userid and passwords specified, as
well as the direction and filenames of files sent/received.
Add these lines to /etc/syslog.conf for FTP logging.
# ftp -l logs here
daemon.info /usr/spool/daemon.info
#
# ftp -d logs here
daemon.debug /usr/spool/daemon.debug
Sorry about the typo on the earlier command line flag.
Later,
markw
--
M. Whetzel
Home: markw@antimatr.hou.tx.us | IBM RT/125 running AIX 2.2.1
UUCP ..!uhnix1!lobster!antimatr!markw
Thread Navigation
This is a paginated view of messages in the thread with full content displayed inline.
Messages are displayed in chronological order, with the original post highlighted in green.
Use pagination controls to navigate through all messages in large threads.
Back to All Threads