On Tue, 2006-01-03 at 19:06 -0500, Devon Harding wrote:
Has anyone found a way to monitor vsftpd connections?
Put these lines in vsftpd.conf then restart vsftpd:
The first one allows you to monitor all current sessions along with
what's going on in the session, what's the source IP, etc, by simply
listing the current processes:
ps ax | grep vsftpd | grep -v grep
Or, if you prefer:
watch -n 1 'ps ax | grep vsftpd | grep -v grep'
# ps ax | grep vsftpd | grep -v grep
32668 ? S 0:00 vsftpd: LISTENER
985 ? Ss 0:00 vsftpd: 192.168.0.12: connected
989 ? S 0:00 vsftpd: 192.168.0.12/florin: IDLE
The second one will reveal vsftpd sessions using the "last" command.
# last | head -n 2
florin vsftpd:985 192.168.0.12 Tue Jan 3 19:31 still logged
florin vsftpd:375 192.168.0.12 Tue Jan 3 19:24 - 19:29 (00:05)
These two options should cover most, if not all, bases. If I understand
your request correctly, that's all you need.
It could be argued that the first option should be enabled by default in
the vsftpd RPM shipped with Fedora. The contrary too could be argued
just as successfully. :-)
> Moreover, google reported many threads about people
switching to proftpd to
> get benefit of those ftptop/ftpwho/etc. tools.
They also get the "benefit" of switching to an FTP server with a _much_
worse security history (and also poorer performance, although this
shouldn't concern too many people).
From a security perspective vsftpd is rock hard. Stay with it unless
have very compelling reasons.