logging - What is the syntax of the FTP log file -
i'm trying go through of ftp logs examine issue i've experienced. log files have shorthand flags, don't know mean, , unable find sort of documentation on it.
an example of line ftp log is:
tue jan 05 17:18:22 2016 0 1.2.3.4 3581 /path/to/file/file.php _ o r username ftp 1 * c date , time obvious, 1.2.3.4 ip address, 3581 i'm assuming linux pid, username ftp account username.
the ending of line, a _ o r username ftp 1 * c (except username , ftp) i'm confused about. , 0 between date , ip address.
is there documentation somewhere flags represent?
based on https://svn.apache.org/repos/asf/httpd/mod_ftp/trunk/modules/ftp/ftp_log.c have following ftp-specific variables:
these callbacks extend mod_log_config adding additional % directives follows: %..m mode used transfer file. single character printed, (ascii) or b (binary) %..f action taken on file (concationated needed) c - file compressed. u - file uncompressed. t - file tarred. _ - no action taken. %..d direction file sent. o - outgoing - incoming %..w how file accessed. r - real - anonymous g - guest %..s service name, 'ftp' %..z authentication method 0 - no auth 1 - rfc931 auth %..y authenticated user id * - if not available the "normal" apache variables can found here: https://httpd.apache.org/docs/2.4/mod/mod_log_config.html#formats
with default log format of (based on https://httpd.apache.org/mod_ftp/ftp/ftp_tls.html)
logformat "%{%b %e %h:%m:%s %y}t %t %a %b %u %m %f %d %w %u %s %z %y" ftp_transfer combined seems be:
date (%{%b %e %h:%m:%s %y}t) time taken serve request, in seconds. (%t) client ip address of request (%a) size of response in bytes, excluding http headers. (%b) url path requested, not including query string. (%u) mode used transfer file, a=ascii, b=binary (%m) action taken on file (%f) direction file sento=outgoing, i=incoming (%d) how file accessed (%w) username (%u) service name, 'ftp' (%s) authentication method 0=none, 1=rfc9321 (%z) authenticated user id *=n/a (%y)
Comments
Post a Comment