drose25

Well-Known Member
Apr 3, 2002
50
0
306
A user of mine has had some directories disappear and he suspects they were deleted via FTP by an ftp user in his account. Is there a log that records FTP transactions anywhere? The only thing I've found so far has been in /etc/proftp and doesn't have much information.

Thanks for any suggestions.
 

p_s_p

Member
Feb 8, 2004
13
0
151
You can get the ftp logs for all domains on the server at location /usr/local/apache/domlogs/ fire a command ls -lh ftp.domainname.com and then use the default text editor like "pico" to view the details.
 

drose25

Well-Known Member
Apr 3, 2002
50
0
306
Thanks! I appreciate the location. Without sounding stupid, can someone help me decipher what a line like this means:

Mon Aug 2 17:12:10 2004 5 user-11216q5.dsl.mindspring.com 129881 /home/hiphop/p
ublic_html/bday/CIMG2146.jpg b _ i r hiphop ftp 1 * c

Most of it is straightforward, but what does the b _ i r hiphop ftp 1 * c mean? Is there a man file for deciphering the output anywhere? I don't see anything related searching at apache.org.