vsftpd monitor?

[wwp]

Hello Mike,


On Tue, 13 Dec 2005 08:09:07 -0600 Mike Klinke <lsomike at futzin.com> wrote:

> On Monday 12 December 2005 19:01, Devon Harding wrote:
> > Is there any way to monitor vsftpd traffic?  Like ftpwho?
> 
> 
> 
> Monitoring at the packet level? .... tcpdump port 21
> 
> 
> Other points/levels of monitoring depend on how you have vsftpd 
> confiured:
> 
> At the login level you can monitor /var/log/messages
> 
>  tail -f /var/log/messages | grep pam_userdb
> 
> if you have virtual users set up.
> 
> 
> At the file transfer level you can monitor your xferlog file if 
> you've configured this logging mechanism.
> 
> Also at the login level you can set up vsftpd to run under xinetd 
> and log user, host, etc by watching /var/log/secure
> 
>   tail -f /var/log/secure | grep vsftpd

I've been told that tail'ing logs is not pertinent on overloaded machines..
maybe smth like proftp's ftptop would help (show online users, current d/l
and u/l, rates, etc.).


Regards,

-- 
wwp