Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > General

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 2nd April 2010, 18:59
afandino afandino is offline
Member
 
Join Date: May 2009
Posts: 35
Thanks: 1
Thanked 3 Times in 3 Posts
Default syslog entries from pure-ftp

Why do i get all these pure ftp entries in my syslog

Apr 2 08:45:01 ispconfig1 pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1
Apr 2 08:45:01 ispconfig1 pure-ftpd: (?@127.0.0.1) [INFO] Logout.
Apr 2 08:50:01 ispconfig1 pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1
Apr 2 08:50:01 ispconfig1 pure-ftpd: (?@127.0.0.1) [INFO] Logout.
Apr 2 08:55:01 ispconfig1 pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1
Apr 2 08:55:01 ispconfig1 pure-ftpd: (?@127.0.0.1) [INFO] Logout.
Apr 2 09:00:02 ispconfig1 pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1
Apr 2 09:00:02 ispconfig1 pure-ftpd: (?@127.0.0.1) [INFO] Logout.
Apr 2 09:05:02 ispconfig1 pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1
Apr 2 09:05:02 ispconfig1 pure-ftpd: (?@127.0.0.1) [INFO] Logout.
Apr 2 09:10:02 ispconfig1 pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1
Apr 2 09:10:02 ispconfig1 pure-ftpd: (?@127.0.0.1) [INFO] Logout.
Apr 2 09:15:01 ispconfig1 pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1
Apr 2 09:15:01 ispconfig1 pure-ftpd: (?@127.0.0.1) [INFO] Logout.
Apr 2 09:20:02 ispconfig1 pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1
Apr 2 09:20:02 ispconfig1 pure-ftpd: (?@127.0.0.1) [INFO] Logout.
Apr 2 09:25:02 ispconfig1 pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1
Apr 2 09:25:02 ispconfig1 pure-ftpd: (?@127.0.0.1) [INFO] Logout.
Apr 2 09:30:02 ispconfig1 pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1
Apr 2 09:30:02 ispconfig1 pure-ftpd: (?@127.0.0.1) [INFO] Logout.
Apr 2 09:35:02 ispconfig1 pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1
Apr 2 09:35:02 ispconfig1 pure-ftpd: (?@127.0.0.1) [INFO] Logout.
Apr 2 09:40:02 ispconfig1 pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1
Apr 2 09:40:02 ispconfig1 pure-ftpd: (?@127.0.0.1) [INFO] Logout.


What is happening exactly ?
Reply With Quote
Sponsored Links
  #2  
Old 2nd April 2010, 21:57
Antennipasi Antennipasi is offline
ISPConfig Developer
 
Join Date: Dec 2008
Location: Finland
Posts: 67
Thanks: 6
Thanked 13 Times in 12 Posts
Default

Quote:
Originally Posted by afandino View Post
What is happening exactly ?
Ispconfig3 Monitor Module is testing if ftp-daemon is alive. You can safely ignore those.
Reply With Quote
The Following User Says Thank You to Antennipasi For This Useful Post:
afandino (2nd April 2010)
  #3  
Old 3rd April 2010, 03:04
Doug G Doug G is offline
HowtoForge Supporter
 
Join Date: Apr 2008
Posts: 69
Thanks: 0
Thanked 9 Times in 6 Posts
Default

Is there any way to suprress the messages logged from the ispconfig3 monitor but still log user login events? In a quick look in the config file for pureftpd it looked like syslogging was an 'all or nothing' setting.
__________________
=====
Doug G
=====
Reply With Quote
  #4  
Old 22nd April 2010, 10:38
mike_p mike_p is offline
Senior Member
 
Join Date: Mar 2010
Location: Surrey, England
Posts: 140
Thanks: 9
Thanked 28 Times in 17 Posts
Default

I don't like my main system log being filled with these ftp info messages so I've edited /etc/syslog.conf and changed the line

*.info;mail.none;authpriv.none;cron.none /var/log/messages

to

*.info;mail.none;authpriv.none;cron.none;ftp.!info /var/log/messages

(then run:# /etc/init.d/syslog reload )

This prevents ftp info data being written to the log.
If I want to know what users have been logging in via ftp I just inspect the
/var/log/pureftp.log
- it shows a lot more detail! & excludes the localhost logins.

--------------------
I also want to remove the clamd "SelfCheck: Database status OK." messages so I've also added
local6.!info to the line in syslog.conf
Those messages are also in the ClamAV log which is viewable from the ISPConfig monitor page.

Now I've got a really clean system log.

Last edited by mike_p; 22nd April 2010 at 11:17. Reason: added clam info
Reply With Quote
The Following 5 Users Say Thank You to mike_p For This Useful Post:
BorderAmigos (17th June 2010), holykim (24th July 2012), marks (6th February 2012), SupuS (15th June 2010), till (25th April 2010)
  #5  
Old 17th June 2010, 02:36
esmiz esmiz is offline
Member
 
Join Date: Dec 2009
Posts: 44
Thanks: 4
Thanked 3 Times in 3 Posts
Default That's good tip

That's good tip

Does anyone know how to get the same in Debian?

Regards
Reply With Quote
  #6  
Old 17th June 2010, 03:14
BorderAmigos BorderAmigos is offline
Senior Member
 
Join Date: Apr 2008
Location: San Diego & Tijuana
Posts: 302
Thanks: 26
Thanked 33 Times in 31 Posts
Send a message via MSN to BorderAmigos Send a message via Yahoo to BorderAmigos
Default

Quote:
Originally Posted by esmiz View Post
That's good tip
Does anyone know how to get the same in Debian?
The same but in /etc/rsyslog.conf
__________________
System6Hosting.com, ISPConfig 3, Debian.
Reply With Quote
  #7  
Old 17th June 2010, 04:22
esmiz esmiz is offline
Member
 
Join Date: Dec 2009
Posts: 44
Thanks: 4
Thanked 3 Times in 3 Posts
Default

Thanks for your answer.

Yes I tried that, but had no luck, perhaps I didn't find the right place in the file.
This is which I changed in /etc/rsyslog.conf

Code:
 Some "catch-all" log files.
#
*.=debug;\
        auth,authpriv.none;\
        news.none;mail.none     -/var/log/debug
*.=info;*.=notice;*.=warn;\
        auth,authpriv.none;\
        cron,daemon.none;\
        mail,news.none          -/var/log/messages
Is that correct?
I also tried adding a new file in /etc/rsyslog.d/ but didn't work either.

Regards
Reply With Quote
  #8  
Old 17th June 2010, 04:58
BorderAmigos BorderAmigos is offline
Senior Member
 
Join Date: Apr 2008
Location: San Diego & Tijuana
Posts: 302
Thanks: 26
Thanked 33 Times in 31 Posts
Send a message via MSN to BorderAmigos Send a message via Yahoo to BorderAmigos
Default

You can add it to that...
Code:
 
Some "catch-all" log files.
#
*.=debug;\
        auth,authpriv.none;\
        news.none;mail.none     -/var/log/debug
*.=info;*.=notice;*.=warn;\
        auth,authpriv.none;\
        cron,daemon.none;\
        mail,news.none;\
        ftp.!info                      -/var/log/messages
I make separate files...
Code:
 
Some "catch-all" log files.
#
*.=debug;\
        auth,authpriv.none;\
        news.none;mail.none     -/var/log/debug
*.=info;\
        auth,authpriv.none;\
        cron,daemon.none;\
        mail,news.none;\
        ftp.!info                      -/var/log/messages.info
*.=notice;\
        auth,authpriv.none;\
        cron,daemon.none;\
        mail,news.none         -/var/log/messages.notice
*.=warn;\
        auth,authpriv.none;\
        cron,daemon.none;\
        mail,news.none          -/var/log/messages.warn
__________________
System6Hosting.com, ISPConfig 3, Debian.

Last edited by BorderAmigos; 17th June 2010 at 05:02.
Reply With Quote
The Following 2 Users Say Thank You to BorderAmigos For This Useful Post:
esmiz (2nd July 2010), marks (6th February 2012)
  #9  
Old 17th June 2010, 05:21
esmiz esmiz is offline
Member
 
Join Date: Dec 2009
Posts: 44
Thanks: 4
Thanked 3 Times in 3 Posts
 
Default

Hi, mate

Thanks again for your answer.
I'll give it a try and tell you. I realize now what could be the error I had.
This was my not working rsyslog.conf before was corrected:
Code:
# Some "catch-all" log files.
#
*.=debug;\
	auth,authpriv.none;\
	news.none;mail.none	-/var/log/debug
*.=info;*.=notice;*.=warn;\
	auth,authpriv.none;\
	cron,daemon.none;\
	mail,news.none;\
	ftp.!info;local6.!info;	-/var/log/messages
Last line should be:
Code:
 ftp.!info,local6.!info	-/var/log/messages
instead isn'it?

Regards
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Log file housekeeping question chillifire Server Operation 2 5th January 2009 19:19
proFTPd passive mode problems bisbell Server Operation 8 6th August 2008 21:12
Question about Virtual Hosting With Proftpd And MySQL (Incl. Quota) On Debian Etch ikkem HOWTO-Related Questions 30 26th February 2008 19:38
FTP Error joshabts Installation/Configuration 3 4th November 2006 16:19
Website users? ctroyp General 25 6th January 2006 18:02


All times are GMT +2. The time now is 02:25.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.