Help reading ftp_log

[partsace]

I need some help.

I am trying to understand the apache ftp logs on my server and I need help with a few things...

1) What is the difference between a & b? ("a" _ o r xx) vs. ("b" _ i r xx)

2)What is the the "o" and "i" stand for? (a _ "o" r xx) vs. (b _ "i" r xx)

3) What is the "1" and "0" after the year? (2001 "0") vs. (2011 "1")

Scott

Example:

Mon Jan 1 14:47:05 2011 0 71.231.x.x 22115 /home/xxx/public_html/index.php a _ o r xx ftp 1 * c
Mon Jan 2 02:10:08 2011 1 204.215.40.47 24919 /home/xxx/public_html/buttons/2.php.2 b _ i r xx ftp 1 * c 

[cPanelTristan]

Hello Scott,

I'll try to answer your questions.

1) What is the difference between a & b? ("a" _ o r xx) vs. ("b" _ i r xx)

This is the "transfer type" portion of the log where:
a = ascii text
b = binary binary

2)What is the the "o" and "i" stand for? (a _ "o" r xx) vs. (b _ "i" r xx)

This is the "direction" portion of the log where:
i = incoming
o = outgoing

3) What is the "1" and "0" after the year? (2001 "0") vs. (2011 "1")

This is the "transfer time" which is gauged in full seconds.

So you basically have in your example:

Mon Jan 1 14:47:05 2011 0 71.231.x.x 22115 /home/xxx/public_html/index.php a _ o r xx ftp 1 * c

Date/Time = Monday, January 1 at 14:47:05, 2011
Transfer time = 0 seconds
IP = 71.231.x.x
Size of transfer = 22115 bytes
Filename = /home/xxx/public_html/index.php
Transfer type = ascii text (where a = ascii text, b = binary text)
Special operations = no special operations (where _ = no special operations, not sure what it would show if it did have them, but it would represent something like tarring or gzipping the file for other types, which I don't believe are supported with the provided FTP)
Direction = outgoing (where i = incoming, o = outgoing)
Access mode = authenticated user (where a = anonymous, b = guest, r = authenticated user)
Username = xx
Service name = ftp
Authentication method = RFC931 (where 0 = none, 1 = RFC931)
Authenticated User ID = not available (where ID = user ID, * = user ID not available)
Completion status = completed (where c = completed, i = interrupted)

Mon Jan 2 02:10:08 2011 1 204.215.40.47 24919 /home/xxx/public_html/buttons/2.php.2 b _ i r xx ftp 1 * c

Date/Time = Monday, January 2 at 02:10:08, 2011
Transfer time = 1 second
IP = 204.215.40.47
Size of transfer = 24919 bytes
Filename = /home/xxx/public_html/buttons/2.php.2
Transfer type = binary text (where a = ascii text, b = binary text)
Special operations = no special operations (where _ = no special operations, not sure what it would show if it did have them, but it would represent something like tarring or gzipping the file for other types, which I don't believe are supported with the provided FTP)
Direction = incoming (where i = incoming, o = outgoing)
Access mode = authenticated user (where a = anonymous, b = guest, r = authenticated user)
Username = xx
Service name = ftp
Authentication method = RFC931 (where 0 = none, 1 = RFC931)
Authenticated User ID = not available (where ID = user ID, * = user ID not available)
Completion status = completed (where c = completed, i = interrupted)

Thanks!

[partsace]

Where is the "EASY" button when you need it!

Thank you for your help!

Scott