# -s, -m, -d, -M = source/dest IP & mask (any) # -w O = outbound connections change this to “B” to log in both directions May 18 10:13:35 ftpserver daemon:debug ftpd: > /etc/nfĪdd a rule to allow and log traffic destined for port 21: # -v 4 = IPv4 Syslog will send any daemon's logs to this file, so you'll want to filter it down with grep, perhaps: grep 'daemon:debug ftpd' /var/log/ftp.log.Ĭommands that were sent via FTP will be logged with the string command: here's a sample: May 18 10:13:35 ftpserver daemon:debug ftpd: command: USER username-here^M To enable FTP logging on an AIX system, you need to reconfigure FTP (being called by inetd in your case) to send debug logs to syslog and to configure syslog to save those logs to a file.Įdit /etc/nf and add -d to the end of the ftpd line: ftp stream tcp6 nowait root /usr/sbin/ftpd ftpd -dĮdit /etc/nf and add a line for bug to save the logs somewhere: bug /var/log/ftp.logĬreate a file for syslog to write to: touch /var/log/ftp.log What commands have been performed on the local FTP server? What commands have been performed by the local FTP client to other servers.What commands have been performed on the local FTP server.So is there a log file for FTP?Ī) inetd is active and ftp is in it (thanks I am trying to know incoming and outgoing traffic on this port - with the commands that were performed (if possible). Is there a place on the AIX server where I should go and look to see the list of accessed and accessing servers via this port? If I have the IP of the server(s) and the file names, I will be able to track the program doing it.Should I cut the 21 port and see what transfers are blocked by the firewall?.Say I don't have the solution to install the tools I want on the server or on the Network. Ok, let's say I am responsible for old application that I don't really know the details of, I am trying to secure my server, and someone suggested to forbid the 21 port that used for FTP.īut I am not sure which programs are running and use FTP on a day to day basis.

Location of filezilla logs