On Tue, 2006-01-03 at 19:06 -0500, Devon Harding wrote: > Has anyone found a way to monitor vsftpd connections? Put these lines in vsftpd.conf then restart vsftpd: setproctitle_enable=YES session_support=YES The first one allows you to monitor all current sessions along with what's going on in the session, what's the source IP, etc, by simply listing the current processes: ps ax | grep vsftpd | grep -v grep Or, if you prefer: watch -n 1 'ps ax | grep vsftpd | grep -v grep' Example: # ps ax | grep vsftpd | grep -v grep 32668 ? S 0:00 vsftpd: LISTENER 985 ? Ss 0:00 vsftpd: 192.168.0.12: connected 989 ? S 0:00 vsftpd: 192.168.0.12/florin: IDLE The second one will reveal vsftpd sessions using the "last" command. Example: # last | head -n 2 florin vsftpd:985 192.168.0.12 Tue Jan 3 19:31 still logged in florin vsftpd:375 192.168.0.12 Tue Jan 3 19:24 - 19:29 (00:05) These two options should cover most, if not all, bases. If I understand your request correctly, that's all you need. It could be argued that the first option should be enabled by default in the vsftpd RPM shipped with Fedora. The contrary too could be argued just as successfully. :-) > > Moreover, google reported many threads about people > switching to proftpd to > > get benefit of those ftptop/ftpwho/etc. tools. They also get the "benefit" of switching to an FTP server with a _much_ worse security history (and also poorer performance, although this shouldn't concern too many people). >From a security perspective vsftpd is rock hard. Stay with it unless you have very compelling reasons. -- Florin Andrei http://florin.myip.org/
