RE: Logging on Solaris 10
"Smith, William E. (Bill), Jr." <[email protected]> Thu, 13 Jul 2006 14:12:17 -0400
| Newsgroups | gmane.network.ftp.wuftpd.user |
|---|---|
| Message-ID | <CB58A9148BBF0A439E16B6355EE0260E4D5F5E@aplesnation.dom1.jhuapl.edu> |
This is a multi-part message in MIME format. ------_=_NextPart_001_01C6A6A7.DFF24392 Content-Type: multipart/alternative; boundary="----_=_NextPart_002_01C6A6A7.DFF24392" ------_=_NextPart_002_01C6A6A7.DFF24392 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I think I have found the source of my problem. It had slipped my mind = that we installed Trend Micro's Interscan product to provide virus = protection for our FTP server. One of its features is that it has a = direct hook into the FTP server and can scan data "on the fly". What I = didn't realize was that rather than using Sun's wu-ftp package, it is = essentially using it's own version. After some further digging, I have = found that it does appear to be logging the details I would get from = ftpd.log, ftpconnections, and xferlog -- albeit in a single file and not = as user friendly. I have to dig around in the config to see if there's = any customization that I can do there. In any case, I think I uncovered = my issue. =20 - Bill ________________________________ From: [email protected] = [mailto:[email protected]] On Behalf Of St=E9phane = Bentebba Sent: Thursday, July 13, 2006 1:19 PM Cc: [email protected] Subject: Re: Logging on Solaris 10 does it used to log before ?=20 what's your log coinfiguration in ftpaccess file ?=20 is syslogd running on solaris ? (maybe there is another process w/ that = os) if you type "lsof /var/log/syslog", you could quicly check wich process = manage this file maybe=20 bye Smith, William E. (Bill), Jr. wrote:=20 I am in the process of setting up wu-ftp on Solaris 10 within a zone. = Once setup, this will replace my Solaris 9-based server. The problem I = am currently having is with logging. Even though I have syslog = configured as I have it on my Solaris 9 server -- namely as noted under = documents http://www.landfield.com/wu-ftpd/ , nothing is getting logged. = Additionally, I'm also not able to get anything logged in = /var/log/xferlog here. I realize things have changed with Solaris 10 so = I'm gathering there may some additional steps I need to go through to = get things working. If anyone can shed some light here, it would be = appreciated.=20 Bill Smith=20 < mailto:[email protected] >=20 ISS Server Systems Group=20 Johns Hopkins University Applied Physics Laboratory=20 11100 Johns Hopkins Road=20 Laurel, MD 20723=20 Phone: 443-778-5523=20 Web: http://www.jhuapl.edu <http://www.jhuapl.edu/> =20 --=20 St=E9phane Bentebba Technicien de Maintenance T=E9l.: +33 (0)1.41.73.20.16 =09 Fax.: +33 (0)1.41.73.20.08 =09 [email protected] www.fps.fr <http://www.fps.fr>=20 <http://www.fps.fr> FPS France Parc d'affaire Silic 43, rue de la Grosse Pierre BP 40160 94533 RUNGIS Cedex =09 ------_=_NextPart_002_01C6A6A7.DFF24392 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD><TITLE>Logging on Solaris 10</TITLE> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Diso-8859-1"> <META content=3D"MSHTML 6.00.2900.2912" name=3DGENERATOR></HEAD> <BODY text=3D#000000 bgColor=3D#ffffff> <DIV dir=3Dltr align=3Dleft><SPAN class=3D248550818-13072006><FONT = face=3DArial=20 color=3D#0000ff size=3D2>I think I have found the source of my = problem. It had=20 slipped my mind that we installed Trend Micro's Interscan product to = provide=20 virus protection for our FTP server. One of its features is that = it has a=20 direct hook into the FTP server and can scan data "on the fly". = What I=20 didn't realize was that rather than using Sun's wu-ftp package, it is=20 essentially using it's own version. After some further digging, I = have=20 found that it does appear to be logging the details I would get from = ftpd.log,=20 ftpconnections, and xferlog -- albeit in a single file and not as user=20 friendly. I have to dig around in the config to see if there's any = customization that I can do there. In any case, I think I = uncovered my=20 issue.</FONT></SPAN></DIV> <DIV><SPAN class=3D248550818-13072006><FONT face=3DArial color=3D#0000ff = size=3D2></FONT></SPAN> </DIV> <DIV><SPAN class=3D248550818-13072006><FONT face=3DArial color=3D#0000ff = size=3D2>-=20 Bill</FONT></SPAN></DIV> <DIV dir=3Dltr align=3Dleft><BR></DIV> <DIV class=3DOutlookMessageHeader lang=3Den-us dir=3Dltr align=3Dleft> <HR tabIndex=3D-1> <FONT face=3DTahoma size=3D2><B>From:</B> = [email protected]=20 [mailto:[email protected]] <B>On Behalf Of = </B>St=E9phane=20 Bentebba<BR><B>Sent:</B> Thursday, July 13, 2006 1:19 PM<BR><B>Cc:</B>=20 [email protected]<BR><B>Subject:</B> Re: Logging on Solaris=20 10<BR></FONT><BR></DIV> <DIV></DIV>does it used to log before ? <BR>what's your log = coinfiguration in=20 ftpaccess file ? <BR>is syslogd running on solaris ? (maybe there is = another=20 process w/ that os)<BR>if you type "lsof /var/log/syslog", you could = quicly=20 check wich process manage this file maybe = <BR><BR>bye<BR><BR><BR><BR>Smith,=20 William E. (Bill), Jr. wrote:=20 <BLOCKQUOTE=20 cite=3DmidCB58A9148BBF0A439E16B6355EE0260E4D5F57@aplesnation.dom1.jhuapl.= edu=20 type=3D"cite"> <META http-equiv=3DContext-Type content=3D"text/html; = charset=3Diso-8859-1"> <P>I am in the process of setting up wu-ftp on Solaris 10 within a = zone. =20 Once setup, this will replace my Solaris 9-based server. The = problem I=20 am currently having is with logging. Even though I have syslog=20 configured as I have it on my Solaris 9 server -- namely as noted = under=20 documents <A=20 = href=3D"http://www.landfield.com/wu-ftpd/">http://www.landfield.com/wu-ft= pd/=20 </A>, nothing is getting logged. Additionally, I'm also not able = to get=20 anything logged in /var/log/xferlog here. I realize things have = changed=20 with Solaris 10 so I'm gathering there may some additional steps I = need to go=20 through to get things working. If anyone can shed some light = here, it=20 would be appreciated. </P> <P>Bill Smith <BR>< <A=20 href=3D"mailto:[email protected]">mailto:[email protected] = </A>>=20 <BR>ISS Server Systems Group <BR>Johns Hopkins University Applied = Physics=20 Laboratory <BR>11100 Johns Hopkins Road <BR>Laurel, MD 20723 = <BR>Phone: =20 443-778-5523 <BR>Web: <A=20 href=3D"http://www.jhuapl.edu/">http://www.jhuapl.edu </A> = =20 </P><BR></BLOCKQUOTE><BR><BR> <DIV class=3Dmoz-signature>-- <BR> <TABLE cellSpacing=3D0 cellPadding=3D6 bgColor=3Dwhite border=3D0> <TBODY> <TR> <TD vAlign=3Dtop align=3Dmiddle><FONT=20 face=3DArial,Helvetica,Geneva,Swiss,SunSans-Regular = size=3D2><B><FONT=20 face=3D"Helvetica, Arial, sans-serif">St=E9phane=20 Bentebba</FONT><BR></B></FONT><SMALL><FONT=20 face=3D"Helvetica, Arial, sans-serif">Technicien de=20 Maintenance</FONT></SMALL><BR></TD> <TD vAlign=3Dcenter align=3Dmiddle> <TABLE cellSpacing=3D0 cellPadding=3D0 border=3D0> <TBODY> <TR> <TD vAlign=3Dtop><FONT face=3D"Helvetica, Arial, sans-serif"=20 size=3D2>T=E9l.:</FONT><FONT=20 face=3D"Helvetica, Arial, sans-serif"><BR></FONT></TD> <TD vAlign=3Dtop><FONT face=3D"Helvetica, Arial, sans-serif"=20 size=3D2> +33 (0)1.41.73.20.16</FONT><FONT=20 face=3D"Helvetica, Arial, sans-serif"><BR></FONT></TD></TR> <TR> <TD vAlign=3Dtop><FONT face=3D"Helvetica, Arial, sans-serif"=20 size=3D2>Fax.:</FONT><FONT=20 face=3D"Helvetica, Arial, sans-serif"><BR></FONT></TD> <TD vAlign=3Dtop><FONT face=3D"Helvetica, Arial, sans-serif"=20 size=3D2> +33 (0)1.41.73.20.08</FONT><FONT=20 face=3D"Helvetica, Arial, = sans-serif"><BR></FONT></TD></TR></TBODY></TABLE> <DIV align=3Dcenter><FONT face=3D"Helvetica, Arial, sans-serif" = size=3D2><A=20 href=3D"mailto:[email protected]">[email protected]</A></FONT><FONT=20 face=3D"Helvetica, Arial, sans-serif"><BR></FONT><FONT=20 face=3DArial,Helvetica,Geneva,Swiss,SunSans-Regular size=3D2><A=20 href=3D"http://www.fps.fr"><FONT=20 face=3D"Helvetica, Arial, = sans-serif">www.fps.fr</FONT><BR></A></FONT></DIV></TD></TR> <TR> <TD vAlign=3Dcenter align=3Dmiddle><A = href=3D"http://www.fps.fr"><IMG height=3D46=20 alt=3D"" src=3D"cid:248550818@13072006-13AA" width=3D92 = border=3D0> </A></TD> <TD vAlign=3Dtop align=3Dmiddle><FONT=20 face=3D"Helvetica, Arial, sans-serif"><SMALL><B>FPS = France</B><BR>Parc=20 d'affaire Silic<BR>43, rue de la Grosse Pierre<BR>BP = 40160<BR>94533 RUNGIS=20 = Cedex</SMALL></FONT><BR></TD></TR></TBODY></TABLE><BR><BR><BR><BR></DIV><= /BODY></HTML> ------_=_NextPart_002_01C6A6A7.DFF24392-- ------_=_NextPart_001_01C6A6A7.DFF24392 Content-Type: image/gif; name="logo-fps.gif" Content-Transfer-Encoding: base64 Content-ID: <248550818@13072006-13AA> Content-Description: logo-fps.gif Content-Location: logo-fps.gif R0lGODlhXAAuAPcAAAAAAAAACAAICAgAAAgICBAAABAICBAQEBgAABgYGBghISEAACEhISkAACkh GCkhISkpKTEAADExMTkAADkIADkxKTk5OUIAAEJCQkoAAEpKSlIIAFJKSlJSUloAAFoIAFoQAFpa WlpjY2MIAGMQAGNjY2sIAGsQAGtjY3MIAHNra3Nzc3sQAHsYAHt7e3t7hHuEhIQQAIQYAIRzc4R7 e4SEhISEjIxKQoyEhIyMjJQQAJQYAJSUlJScnJwQAJwYAJwYCJwhAJycnKUQAKUYAKWlnKWlpaWt ra0QAK0YAK0hAK1jUq1zY62tpa2tra2tta21ta29vbUQALUYALUhALUpALVjUrW1tbW1vbW9vb0Y AL0hAL0hCL0pAL0pCL0xCL05GL1aQr2Ee72UjL2trb29vb3GxsYpAMYpCMYxCMbGxs7OztYxANYx CNY5CNaEY9aEa9aUhNbW1t4hAN4xCN45CN45EN5rSt5zSt6Ue97Ozt7e3ucYAOchAOcpAOcxCOc5 COc5EOdCCOdCEOdKEOdjOedrMedrSudzSud7Sud7Uufn5+fv7+8xAO9CEO9aKe9aMe9rOe/n7+/v 7/cYAPcxAPdSIfdSKfdaKfdzSveEY/eMWvethPe1e/fv7/f39/8pAP8xAP85AP9CAP9CCP9KAP9S EP9rIf9rOf9zQv97Qv97Uv+EOf+EQv+ESv+MOf+MY/+UY/+Uc/+lUv+la/+9nP/nrf/n1v/n3v/v rf/v5//v7//39///9/////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////////ywAAAAAXAAuAAAI/gB9CRxI sKDBgwgTKlzIsKHDhxAjSoTIq6LFixgzZvT1SaNHjLt6KeS166PJTyIPpjoVqlKoljBhupT50qVL Pz14bTo102bNmD5bjqIU55PBW6xGjRIlamlTpk6jQq0U4ZNRg6gGKdmqhArXrV65hu3KdQAMOZm0 Kkmyti3bt27bbplyYtFVX7VswYH7tu9av0mIsAAgR84krIOSJKGiuLHjx4+nFEBhpNAgKlUwe6lS ZXNnzp4/d03yocIaq7dsgfFKpTVozq9hi24xwIiRPXcFZl08GrJvx1QKlKh8mTFbxl6njE6+PPOU AULUfJr1prVr44+J+KYiA4Bt3AV3/rdWrHwK8sXllZjnnUQ48evW48u3nlnxBQhO9LxabLz//P9J xOCdEXIgplhmXW2m4GueLaiEe5b5N95vjfW3g3eKqNJfFUh0hR2Fi3X3nYFJZOYFYzqkqOKKLAYB IRsq/hAEECyyqB1yjBEBgBCPEMJYFW+F5QMRW7GlBJFtKeHDYN/l5ot42C0gQAACVEmllVVOWSUB KhgRhgAEZCnmmFUaMNdaU9S3IyR2YIbjCQDEKeecdMo5YniJlWgdADAccQUUUGABqKCBDgroEUZg IVAWfzoBRRRQ/CkpoGSQ4uGEa9oBnBIIiHDEEYCGKiqgTpR6hW0F4nmgcRn4odSr/rDGOkooM5Th iilQwdqUUruO0kon/TUGQBFsssYfBV48cskjyjK7bLOQiMHoFdQuYuCEVEzhxRlocOttt+B6W4AN i2SSiBfofuGFuuyu664XSCBXxRSBrRnIYpsh14Ybbuzb77/7tkHHHEDYZZVVqh7nZmse8rcWw4tV UYAKThii6XkYL6bxhLwp8YN3hQCCnVcVNvYwW/FutUMEhjmpW2INLzeEsUmkTEWHSLQ3nGUPj4dx eiSz1toGARgxRiXJCZ2Z0Iz9RcXMjE2ggRrWXvvhyYpRcWLWC0M4SGZAav2ZZ1xwVp51iwFAmRF8 MOyFntZtXZ/PmB3pnRqHJWzd/lZpvu3wX8etJVwRESqRsslJKJe1w1lvMKARcRDB8MgeAp5mfRoD kMNtTqKiKViJdyUFFVts0doUU5hOOhemD27Z0lmfWPrsW5w4BevZOs6DEUJc8ckNH+iQOuuyo146 61uYzBoCHRghnarZZv1DBBQ00EAEEVyvffbWRwDAzpcZrthaFHBvPvXXFwCAADXY5gR4K9QpPwAF JJhcEgtIIEQZdhGUVVt1G4AFOkDAAhrwgB1oH8/qdqIREACBCKzBqWyzhrwJxAg2gEENXKDBDr6g BjBYQihIdhwKQMAITqjaQDxHL58NYAVCcJ9tZkjDGkbia4tTAgkSEMMa+tAJ/ka4Am54IYtYwAIW mlAEHu7AxCbeYYl34IQrSkaFBkBACE6woG7sMJq/vBBVewijGMdIxrT0JTMnOIBt1EBGMS4ijIvI Gy5oYYc6BKIOdagjHvdYBzrgkRBAUgLYlNAAC6CwfyvUinKoULYX9m4SKeGIQFJyFZGs4msQS8IO Y7gIkdzFk07CBSl4g7b4VAFwJVICF8iThO9hUYVbpBdZqODIK2hxIZf8kXVIoEYjIJIhuyAFCbNW pMRNbnEMm8KODpkbz42GXkn4YhYfkkvAUWGTt3mILiyFmdCxBppdMVHTWAOCATmhc20CyymleUuF 5JI/rcEmLBeyTeaM7EMb/gNbtgBAgzWiE0f0KgAMbUnNy2hMPTtskkOC2RovJEhjbFkac8wjBSAM 4IqowooSPvCBEXCUBABYAQrbmZBVKGEEHkXpBxrAQ19qsxIe7ShHPUoClNaUozL9AAUWAAAMNEEI +3PZEhTAgAMcIAFGTYALsEhShDBBAQo4alIP8IA7NcQTDygqUqcq1a5uNQEQCAEPeniFeRJkEqc6 QhMQxTuCQgStRlhrXI8ghCbsQSJqmCuigLjWvc6VhjF0Av8UMok1yGENiE3sHpqakMIa1rBqeCxj EfKJPSRWDpE9bGI3i1nEymEPv0wIwgRilNFGxCiHKa3LHJI3hB2MI7kp5i1pJ0Lb2tr2trjNrW53 y9ve3lYOB5CABBQCAAsAwAkMKcMBGGIAFwxEAAupQU8hAADiChcCDJFDBxhSXV90VyEEkIBZC0JV IQiEAApRAwMoCd6HyIEACUgAcVcAgRosZBEWmIR8FbJcApTBF+hNCAPGexACrEAF9l2IHDQwickS 5gCpSkh8FQCAyS7Xu+9ViHgdQoDPEpgg2uUuR76LkAM0eBEM4C9p46SQRXx3sgFuiBwwIGJfqGG/ B5HAXc+7WoF89xMkPogc5ETjhMzJtw/pMW1lyxAlI/nJUI6ylKdM5Sr7IiAAADs= ------_=_NextPart_001_01C6A6A7.DFF24392--