Re: [Proftpd-user] Data channel port logging?

Matus UHLAR - fantomas <[email protected]>
Newsgroups gmane.network.proftpd.user
Message-ID <[email protected]>
On 02.01.20 19:58, Jeff Gibson wrote:
>I've noticed that only the control channel ports are logged.  I don't see
> any option to also log the incoming (or outgoing) data channel port for
> ExtendedLog.

yes, data channel transfers files and file listings.  Why should you log
that kind of information?

howeverm, if you really need it, you can do standard packet capture
(tcpdump,wireshark) and parse the result (wireshark is nice for that)

>Tracelog will show the incoming port for passive mode but not for port mode - plus I can't customize the format.
>
>Is any of this possible at all or on any sort of roadmap?  Are they shown in a different log?
>
>The closest matches I can get in ExtendedLog is
> cmdargs="10,128,2,224,34,93" for port mode or response="Entering Passive
> Mode (10,128,43,119,56,185)" which of course are not easy to parse. 

this is the format data are sent over the network, it's up to the
client/server to parse.
I guess extendedlog is not designed for what you want it to do.

> Ideally I'd like to see the client and server ports used for every data
> channel request regardless of mode.

this could be a bug or at least enhancement request.
but first, answer my question above.

> What I find curious is that in the mod_log/ExtendedLog documentation there
> is a See Also link to points to TransferLog.  Likewise there is a link
> from the mod_core/TransferLog section back to ExtendedLog which seems to
> imply that TransferLog can be formatted like ExtendedLog.  However I
> haven't had any success getting this to work.

transferlog uses "wu-ftpd style" file transfer log as the doc say.
extended log has configurable format, so it's an alternative to transferlog.

-- 
Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
"To Boot or not to Boot, that's the question." [WD1270 Caviar]


_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.