Hi all,
How can I log all requests on ports for programs like ftp, telnet, rsh, xdmcp etc...
I want to see if anyone uses these programs/protocols and how often.
Is it difficult to setup a log for these ports and listen on all requests?
/combat
Hi,
You can use teh command :
Netstat -a , to see the ports status.
Ok..., but how can I log all requstes to a file from this?
I want to see everytime someone login to my machine and uses the telnet, ftp, or rsh commands.
Is it possible to do some edit in /etc/inet/inetd.conf file?
/combat
Most of those logs may be found in /var/log. You may also want to enable the "all.log" from /etc/syslog.conf - there are instructions within the file.
It won't give you information for everything, but tcp wrappers may be of some use to you.