Submitted by responsiveny on Tue, 05/27/2014 - 11:06
Hi, I would like to enable logging of all ftp activity. i am using the proftpd server build into vm. i have a /var/log/proftpd folder, but nothing in it.
how to enable logging on proftpd?
Status:
Active
Comments
Submitted by responsiveny on Tue, 05/27/2014 - 11:10 Comment #1
rpm -qa | grep proftp proftpd-1.3.3g-4.el6.x86_64
Submitted by responsiveny on Tue, 05/27/2014 - 11:13 Comment #2
CentOS release 6.5 (Final)
Submitted by andreychek on Tue, 05/27/2014 - 13:21 Comment #3
Howdy -- do you see any of the log messages you're after in /var/log/messages or /var/log/secure?
Submitted by responsiveny on Tue, 05/27/2014 - 18:27 Comment #4
Nothing in /var/log/messages.
in /var/log/secure i do have this:
May 27 23:00:53 killjoy sshd[13492]: reverse mapping checking getaddrinfo for xxxxxxxx [xxxxx.79] failed - POSSIBLE BREAK-IN ATTEMPT!May 27 23:00:54 killjoy sshd[13492]: Accepted password for verify from xxxxx.79 port 55860 ssh2
May 27 23:00:54 killjoy sshd[13492]: pam_unix(sshd:session): session opened for user verify by (uid=0)
May 27 23:00:54 killjoy sshd[13494]: subsystem request for sftp
May 27 23:01:00 killjoy sshd[13492]: pam_unix(sshd:session): session closed for user verify
but it's not really what i'm looking for.
Submitted by andreychek on Wed, 05/28/2014 - 10:53 Comment #5
It looks like CentOS may not enable more verbose logging by default.
What you could try is to edit /etc/proftpd.conf, and add these two lines somewhere near the top:
TransferLog /var/log/proftpd/xferlogSystemLog /var/log/proftpd/proftpd.log
After restarting ProFTPd, does that generate the log messages you're looking for?