ftp service problem.. please help..

[Manuel Arostegui Ramirez]

El Jueves 07 Abril 2005 10:04, robent escribió:
> mm.. what logs did you mean?
> is it the one that defined in vsftpd.conf? (/var/log/vsftpd.log)
>
> if i look inside that file, seems nothing wrong with it..
> (i mean, it look just the same with the other record..)
> i think it just keep records of files that uploaded or downloaded from host
> with ftp service..
>
> the problem is i can't log in to the server by ftp..
> ( i only can log in by ftp if i restart the service)
> is there any log that i can see, that keep record when people log in by ftp
> and if there is any problem with it?
>
> thanks for any comment.. :D

In case of proftpd in logs i'm able to see who logged into my server, like 
this way:

Mar 16 16:34:20 Mind proftpd[1088] Mind (192.168.1.11[192.168.1.11]): USER 
manu: Login successful.
Mar 16 16:34:21 Mind proftpd[1089] Mind (192.168.1.11[192.168.1.11]): FTP 
session opened.
Mar 16 16:34:21 Mind proftpd[1089] Mind (192.168.1.11[192.168.1.11]): USER 
manu: Login successful.
Mar 16 16:39:20 Mind proftpd[1088] Mind (192.168.1.11[192.168.1.11]): FTP no 
transfer timeout, disconnected
Mar 16 16:39:20 Mind proftpd[1088] Mind (192.168.1.11[192.168.1.11]): FTP 
session closed.

Maybe in vsftpd.conf you define more log level in order to see what happen 
with your server.

What about /var/log/messages is there something strange with your ftp server?
Do you think that maybe someone has hacked your box?
Have you passed rkhunter in order to search for some rootkits?

Cheers

-- 
Manuel Arostegui Ramirez #Linux Registered User 295750
Socio de Hispalinux 1813
Red Hat Linux 9, Kernel 2.6.2 ReiserFS
Firma  cifrada
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQE+3O1MqfmPcHTj+twRAm
yDAJ9P6ezepIMg06vOet/YPKxVoB+Z/ACfWVhh
---END PGP SIGNATURE-----