Hello Mike, On Tue, 13 Dec 2005 08:09:07 -0600 Mike Klinke <lsomike@xxxxxxxxxx> wrote: > On Monday 12 December 2005 19:01, Devon Harding wrote: > > Is there any way to monitor vsftpd traffic? Like ftpwho? > > > > Monitoring at the packet level? .... tcpdump port 21 > > > Other points/levels of monitoring depend on how you have vsftpd > confiured: > > At the login level you can monitor /var/log/messages > > tail -f /var/log/messages | grep pam_userdb > > if you have virtual users set up. > > > At the file transfer level you can monitor your xferlog file if > you've configured this logging mechanism. > > Also at the login level you can set up vsftpd to run under xinetd > and log user, host, etc by watching /var/log/secure > > tail -f /var/log/secure | grep vsftpd I've been told that tail'ing logs is not pertinent on overloaded machines.. maybe smth like proftp's ftptop would help (show online users, current d/l and u/l, rates, etc.). Regards, -- wwp
