Re: [Proftpd-user] Data channel port logging?
Matus UHLAR - fantomas <[email protected]>
| Newsgroups | gmane.network.proftpd.user |
|---|---|
| Message-ID | <[email protected]> |
On 02.01.20 19:58, Jeff Gibson wrote: >I've noticed that only the control channel ports are logged. I don't see > any option to also log the incoming (or outgoing) data channel port for > ExtendedLog. yes, data channel transfers files and file listings. Why should you log that kind of information? howeverm, if you really need it, you can do standard packet capture (tcpdump,wireshark) and parse the result (wireshark is nice for that) >Tracelog will show the incoming port for passive mode but not for port mode - plus I can't customize the format. > >Is any of this possible at all or on any sort of roadmap? Are they shown in a different log? > >The closest matches I can get in ExtendedLog is > cmdargs="10,128,2,224,34,93" for port mode or response="Entering Passive > Mode (10,128,43,119,56,185)" which of course are not easy to parse. this is the format data are sent over the network, it's up to the client/server to parse. I guess extendedlog is not designed for what you want it to do. > Ideally I'd like to see the client and server ports used for every data > channel request regardless of mode. this could be a bug or at least enhancement request. but first, answer my question above. > What I find curious is that in the mod_log/ExtendedLog documentation there > is a See Also link to points to TransferLog. Likewise there is a link > from the mod_core/TransferLog section back to ExtendedLog which seems to > imply that TransferLog can be formatted like ExtendedLog. However I > haven't had any success getting this to work. transferlog uses "wu-ftpd style" file transfer log as the doc say. extended log has configurable format, so it's an alternative to transferlog. -- Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. "To Boot or not to Boot, that's the question." [WD1270 Caviar] _______________________________________________ ProFTPD Users List <[email protected]> Unsubscribe problems? http://www.proftpd.org/list-unsub.html