ftp access logs

Mike Ballon mike.ballon at gmail.com
Mon Dec 27 10:38:27 MST 2010


date transfer_time remote_ip size filename bINARY/aSCIIi
specialFlagAlways[_] oUT/iN rEAL/aNONYMOUS username service authMethodNumber
authenticationUserIdAlwaysStar cOMPLETE/iNCOMPLETE

On Mon, Dec 27, 2010 at 12:00 PM, Steve Phariss <sphariss at gmail.com> wrote:

> Hey all,
>
> I am trying to decipher my FTP log and am having some trouble with the
> diffrnet fields
>
>
>
> Wed Dec 22 13:55:49 2010 0 98.165.x.x 7629
> /home2/bluesage/public_html/header2.inc a _ o r bluesage ftp 1 * c
> Wed Dec 22 13:56:19 2010 0 98.165.x.x 7464
> /home2/bluesage/public_html/header2.inc a _ i r bluesage ftp 1 * c
> Mon Dec 27 09:38:09 2010 0 98.165.x.x 6741
> /home2/bluesage/public_html/header2.inc a _ o r bluesage ftp 1 * c
>
> I can read the Date/Time, IP, filesize??, Filename
>
> The last few I am having some problems with:
>
> a _ o r  = ????
>
> bluesage = user???
>
> ftp = protocall??
>
> 1 * c  = ????
>
> Thanks for anyone that can help out.....
>
> Steve
>
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.PLUG.phoenix.az.us/pipermail/plug-discuss/attachments/20101227/94be7f10/attachment.html>


More information about the PLUG-discuss mailing list