Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

ftp xferlog is missing in Logwatch

Posted on 2004-07-30
7
Medium Priority
?
717 Views
Last Modified: 2012-06-21
I have logwatch (the latest version 5 ) installed in my Red Hat 9 and I receive the logwatch email everyday.

However the ftp xferlog (files that are uploading and downloading by users) is missing:

ie the following is missing:
 --------------------- ftpd-xferlog Begin ------------------------

TOTAL KB IN: 3188KB (3MB)

Incoming User FTP Transfers:
   123.123.123.1 -> /home/usr/public_html/something.jpg (User: usr)

I have already set Detail = High in the logwatch conf file but doesn't work.  How to fix this problem?
0
Comment
Question by:skinnyp
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
7 Comments
 
LVL 51

Expert Comment

by:ahoffmann
ID: 11687563
depending on your ftpd verison, you need to use speicial options when starting ftpd, probably -d
0
 

Author Comment

by:skinnyp
ID: 11718110
I'm using pureftp.  When I changed to proftpd I can get the ftp info from logwatch.  If using pureftp I won't get any ftp info.  I do, however when manually check at /var/log/xferlog

0
 
LVL 51

Expert Comment

by:ahoffmann
ID: 11720048
as said before, you need to pass an option to ftp, logwatch just checks what had been written to the logfile
0
Q2 2017 - Latest Malware & Internet Attacks

WatchGuard’s Threat Lab is a group of dedicated threat researchers committed to helping you stay ahead of the bad guys by providing in-depth analysis of the top security threats to your network.  Check out our latest Quarterly Internet Security Report!

 

Author Comment

by:skinnyp
ID: 11725315
How to pass the option to ftp? Which configuration has to be modified? And how?
0
 
LVL 51

Accepted Solution

by:
ahoffmann earned 2000 total points
ID: 11729081
depends on how ftpd is started.
Most likely it's started via inetd, then you need to edit /etc/inetd.conf.
Sometimes it's started via rc-script, then edit the corresponding script (in /etc/init.d usually)
0
 
LVL 97

Expert Comment

by:war1
ID: 15874158
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.
I will leave the following recommendation for this question in the Cleanup topic area:
Accept: ahoffmann (#11729081)

Any objections should be posted here in the next 4 days. After that time, the question will be closed.

war1
EE Cleanup Volunteer
0

Featured Post

Enroll in October's Free Course of the Month

Do you work with and analyze data? Enroll in October's Course of the Month for 7+ hours of SQL training, allowing you to quickly and efficiently store or retrieve data. It's free for Premium Members, Team Accounts, and Qualified Experts!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Hey fellow admins! This time, I have a little fairy tale for you. As many tales do, it starts boring and then gets pretty gory. I hope you like it. TL;DR: It is about an important security matter, you should read it if you run or administer Windows …
In this article, WatchGuard's Director of Security Strategy and Research Teri Radichel, takes a look at insider threats, the risk they can pose to your organization, and the best ways to defend against them.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
In a question here at Experts Exchange (https://www.experts-exchange.com/questions/29062564/Adobe-acrobat-reader-DC.html), a member asked how to create a signature in Adobe Acrobat Reader DC (the free Reader product, not the paid, full Acrobat produ…

610 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question