/var/log/vsftpd.log thường có nhiều thông báo CONNECT đáng ngờ từ những IP lạ gây bối rối cho người dùng.
Cấu hình log qua /etc/vsftpd.conf
- syslog_enable=NO #writes directly to log file instead
- log_ftp_protocol=NO #Logs everything passing between client and ftp service
- xferlog_enable=YES #Logs the uploads and downloads and the username of which has done this.
- vsftpd_log_file=… #Specifies where i want the log file to be written
- xferlog_std_format=YES/NO #currently have this set yo yes need to play with it a bit more to find if its actually any use or not.
- xferlog_file=… #Don’t know if this is really required, again need to play, doesn’t seem to log anything overly helpful
- dual_log_enable=YES #enables logging in both vsftpd or xfer logging styles, vsftpd looks better so far