Path: utzoo!attcan!uunet!snorkelwacker!apple!julius.cs.uiuc.edu!zaphod.mps.ohio-state.edu!sdd.hp.com!hp-pcd!hpcvlx!tomg
From: tomg@hpcvlx.cv.hp.com (Thomas J. Gilg)
Newsgroups: comp.unix.admin
Subject: Re: Tracking ANONYMOUS FTP
Message-ID: <114160001@hpcvlx.cv.hp.com>
Date: 11 Sep 90 16:43:25 GMT
References: <913@dg.dg.com>
Organization: Hewlett-Packard Co., Corvallis, OR, USA
Lines: 16


>   How are anonymous FTP logins tracked??   I know that some systems want you
> to send your ID as the password but Ive looked all over documentation and
> my system but cant seem to find any log of this information.   

I've seen several versions of ftpd that utilize /usr/adm/wtmp and
/usr/adm/btmp in some form or fashion.  Its never really documented,
but I've discovered that if those files exist, ftpd will use them.

Your version of ftpd might log into the utmp files, and hopefully if
it does, it dumps enough information to be useful.

Hope this is useful info for you,

Thomas Gilg
tomg@cv.hp.com