Path: utzoo!utgpu!news-server.csri.toronto.edu!bonnie.concordia.ca!uunet!email!vmars!hp
From: hp@vmars.tuwien.ac.at (Peter Holzer)
Newsgroups: comp.unix.wizards
Subject: Re: ftp logging
Message-ID: <1991Jun6.183642.11413@email.tuwien.ac.at>
Date: 6 Jun 91 18:36:42 GMT
References: <9107@ucdavis.ucdavis.edu> <1991Jun6.134809.27567@thunder.mcrcim.mcgill.edu>
Sender: news@email.tuwien.ac.at
Organization: Technical University Vienna, Dept. for Realtime Systems, AUSTRIA
Lines: 19
Nntp-Posting-Host: gipsy.vmars.tuwien.ac.at

mouse@thunder.mcrcim.mcgill.edu (der Mouse) writes:


>Our ftpd logs all anonymous sessions through syslog.  This involves a
>handful of changes - a variable (which may already exist - I don't
>recall offhand) to remember whether an anonymous session is in progress
>and a call to syslog for every command received.  On our machine I had
>to hack syslog(), too, so it worked when under the influence of chroot,
>but that was fairly straightforward.

The newest version of the Berkeley ftpd does this also if called with
the -a flag. We installed it last week, and it is interesting to see what files
are fetched most and from where people are connecting.

--
|    _  | Peter J. Holzer                       | Think of it   |
| |_|_) | Technical University Vienna           | as evolution  |
| | |   | Dept. for Real-Time Systems           | in action!    |
| __/   | hp@vmars.tuwien.ac.at                 |     Tony Rand |