[Logwatch] Proftpd

Federico E. Petronio petronio@agro.uba.ar
Tue, 11 Nov 2003 14:41:41 -0300


Hello... I am seting up logwatch for proftpd but it does not work with my logs.

Could you tell me if that is because the logwatch's proftpd module is for non-
default logs or my logs are not accurate or if it is something else? Maybe you 
could tell me what log format you use.

Thanks a lot...

This is an extract from my logs:

bash-2.05# cat /usr/local/var/proftpd/proftpd.log
Nov 10 18:55:57 www2 proftpd[12128] www2: ProFTPD 1.2.9rc3 (devel)
(built Tue Oct 21 20:18:30 GMT 2003) standalone mode STARTUP
Nov 10 18:56:42 www2 proftpd[12176] www2 (10.2.0.254[10.2.0.254]): FTP
session opened.
Nov 10 18:56:52 www2 proftpd[12176] www2 (10.2.0.254[10.2.0.254]): USER
adm@ggt.com.ar (Login failed): Incorrect password.
Nov 10 18:56:57 www2 proftpd[12176] www2 (10.2.0.254[10.2.0.254]): FTP
session closed.
Nov 10 18:57:00 www2 proftpd[12191] www2 (10.2.0.254[10.2.0.254]): FTP
session opened.
Nov 10 18:57:07 www2 proftpd[12191] www2 (10.2.0.254[10.2.0.254]): USER
adm@ggt.com.ar: Login successful.
Nov 10 18:57:12 www2 proftpd[12191] www2 (10.2.0.254[10.2.0.254]): FTP
session closed.
Nov 10 18:57:16 www2 proftpd[12211] www2 (127.0.0.1[127.0.0.1]): FTP
session opened.
Nov 10 18:57:16 www2 proftpd[12211] www2 (127.0.0.1[127.0.0.1]): FTP
session closed.
Nov 10 19:00:16 www2 proftpd[12393] www2 (127.0.0.1[127.0.0.1]): FTP
session opened.
Nov 10 19:00:16 www2 proftpd[12393] www2 (127.0.0.1[127.0.0.1]): FTP
session closed.

-- 
                                        Federico Petronio
                                        petronio@agro.uba.ar
                                        Linux User #129974

---
There are only 10 types of people in the world:
              Those who understand binary and those who don't.