Re: [xferlog] Interpretation of the "direction" field
Stephane Bentebba <[email protected]> Mon, 21 Nov 2005 15:07:04 +0100
| Newsgroups | gmane.network.ftp.wuftpd.user |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format.
--------------060906070102040307030200
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable
I used your command over my xferlog files
i only have 'i' or 'o'
perhaps your log come from an old older version which used to abreviate=20
the direction from words Incoming and Downloading
or perhaps someone had modified the source code to display d instead of o
i can't really help
[FR tiens, encore un fran=E7ais]
Cal B a =E9crit :
>Hello to the list :)
>
>I am analysing log files of an ftp server.
>
>After analyzing the structure of the log file (which
>is named xferlog-xxx), I have noticed that the
>structure of the fields and the data expected in each
>field these matches the one described in the man page
>for xferlog [ http://www.wu-ftpd.org/man/xferlog.html
>], and I assume that this log file was generated by
>WU-FTPD.
>
>All the fields appear to be consistent with this
>description, except the "direction" field (12th
>field), which the man page describes as :
>
>direction is the direction of the transfer.
>Can
> be one of:
> o outgoing
> i incoming
>
>... while in my log file, this field is having either
>"i" or "d".
>
>I use awk to go through the whole log file, like this
>:
>
>cat xferlog-xxx.1 | awk '{ print $12 }' | sort | uniq
>
>I have no idea which WU-FTP server version was used to
>generate this log file (assuming WU-FTP was indeed
>used).
>
>I was just wondering is this "d" value in the
>"direction" field of xferlog makes sense for WU-FTP,
>and if it can be interpreted as "outgoing" or if it
>has some other meaning.
>
>Thanks in advance for any hint.
>
>
>
>--
>Cal
>
>
>=09
>
>=09
> =09
>________________________________________________________________________=
___=20
>Appel audio GRATUIT partout dans le monde avec le nouveau Yahoo! Messeng=
er=20
>T=E9l=E9chargez cette version sur http://fr.messenger.yahoo.com
>
> =20
>
--=20
*St=E9phane Bentebba
*Technicien de Maintenance
=09
T=E9l.:
+33 (0)1.41.73.20.16
Fax.:
+33 (0)1.41.73.20.08
[email protected] <mailto:[email protected]>
www.fps.fr
<http://www.fps.fr>
<http://www.fps.fr> *FPS France*
Parc d'affaire Silic
43, rue de la Grosse Pierre
BP 40160
94.533 RUNGIS Cedex
--------------060906070102040307030200
Content-Type: multipart/related;
boundary="------------040507050503020800060206"
--------------040507050503020800060206
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1">
<title></title>
</head>
<body text="#000000" bgcolor="#ffffff">
I used your command over my xferlog files<br>
i only have 'i' or 'o'<br>
perhaps your log come from an old older version which used to abreviate
the direction from words Incoming and Downloading<br>
or perhaps someone had modified the source code to display d instead of
o<br>
i can't really help <br>
<br>
[FR tiens, encore un français]<br>
<br>
Cal B a écrit :<br>
<blockquote type="cite"
cite="[email protected]">
<pre wrap="">Hello to the list :)
I am analysing log files of an ftp server.
After analyzing the structure of the log file (which
is named xferlog-xxx), I have noticed that the
structure of the fields and the data expected in each
field these matches the one described in the man page
for xferlog [ <a class="moz-txt-link-freetext" href="http://www.wu-ftpd.org/man/xferlog.html">http://www.wu-ftpd.org/man/xferlog.html</a>
], and I assume that this log file was generated by
WU-FTPD.
All the fields appear to be consistent with this
description, except the "direction" field (12th
field), which the man page describes as :
direction is the direction of the transfer.
Can
be one of:
o outgoing
i incoming
... while in my log file, this field is having either
"i" or "d".
I use awk to go through the whole log file, like this
:
cat xferlog-xxx.1 | awk '{ print $12 }' | sort | uniq
I have no idea which WU-FTP server version was used to
generate this log file (assuming WU-FTP was indeed
used).
I was just wondering is this "d" value in the
"direction" field of xferlog makes sense for WU-FTP,
and if it can be interpreted as "outgoing" or if it
has some other meaning.
Thanks in advance for any hint.
--
Cal
___________________________________________________________________________
Appel audio GRATUIT partout dans le monde avec le nouveau Yahoo! Messenger
Téléchargez cette version sur <a class="moz-txt-link-freetext" href="http://fr.messenger.yahoo.com">http://fr.messenger.yahoo.com</a>
</pre>
</blockquote>
<br>
<div class="moz-signature">-- <br>
<title>mysignature</title>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
<table cellspacing="0" cellpadding="6" bgcolor="white" border="0">
<tbody>
<tr>
<td valign="top" align="center"> <font
face="Arial,Helvetica,Geneva,Swiss,SunSans-Regular" size="2"><b><font
face="Helvetica, Arial, sans-serif">Stéphane Bentebba</font><br>
</b></font><small><font face="Helvetica, Arial, sans-serif">Technicien
de Maintenance</font></small><br>
</td>
<td align="center" valign="middle">
<table cellpadding="0" cellspacing="0" border="0">
<tbody>
<tr>
<td valign="top"><font face="Helvetica, Arial, sans-serif"
size="2">Tél.:</font><font face="Helvetica, Arial, sans-serif"><br>
</font> </td>
<td valign="top"><font face="Helvetica, Arial, sans-serif"
size="2"> +33 (0)1.41.73.20.16</font><font
face="Helvetica, Arial, sans-serif"><br>
</font> </td>
</tr>
<tr>
<td valign="top"><font face="Helvetica, Arial, sans-serif"
size="2">Fax.:</font><font face="Helvetica, Arial, sans-serif"><br>
</font> </td>
<td valign="top"><font face="Helvetica, Arial, sans-serif"
size="2"> +33 (0)1.41.73.20.08</font><font
face="Helvetica, Arial, sans-serif"><br>
</font> </td>
</tr>
</tbody>
</table>
<div align="center"><font face="Helvetica, Arial, sans-serif"
size="2"><a href="mailto:[email protected]">[email protected]</a></font><font
face="Helvetica, Arial, sans-serif"><br>
</font> <font face="Arial,Helvetica,Geneva,Swiss,SunSans-Regular"
size="2"> <a href="http://www.fps.fr"><font
face="Helvetica, Arial, sans-serif">www.fps.fr</font><br>
</a></font></div>
</td>
</tr>
<tr>
<td valign="center" align="center"><a href="http://www.fps.fr"><img
height="46" src="cid:[email protected]" width="92" alt=""
border="0"> </a> </td>
<td valign="top" align="center"><font
face="Helvetica, Arial, sans-serif"><small><b>FPS France</b><br>
Parc d'affaire Silic<br>
43, rue de la Grosse Pierre<br>
BP 40160<br>
94.533 RUNGIS Cedex</small></font><br>
</td>
</tr>
</tbody>
</table>
<br>
<br>
<br>
<br>
</div>
</body>
</html>
--------------040507050503020800060206
Content-Type: image/gif;
name="logo-fps.gif"
Content-Transfer-Encoding: base64
Content-ID: <[email protected]>
Content-Disposition: inline;
filename="logo-fps.gif"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--------------040507050503020800060206--
--------------060906070102040307030200--