viewing ftp client logs

Linux and Unix-Like Linux
1

Hi All

Is there any linux log file that captures invalid ftp login attempts in client side? I'm trying to come up with a script that will send an email to owners stating the number of invalid password login attempt when logging in to the ftp server.

its like,

  1. i'm in client side...then I ftp to 192.xxx.xxx.xxx IP
    login: ftp_root
    password: XXXXXX
    -Invalid password

login: ftp_root
password: XXXXXX
-Invalid password

login: ftp_root
password: XXXXXX
-Correct password
#

***PS, what I want to capture is the number of login attempts by ftp_root

anyone got any idea where to check this? vsftpd.log doesn't show these. Anyone? :slight_smile:

2

Depends on the client -- what are you using? -- but I have never seen a client which kept logs like that. Anyway, I would be looking at the server-side logs.

3

I think lftp has such client log files, but cannot be 100% sure, I don't have it handy to check. What I have is "ncftp" :
cd $HOME/.ncftp
Listing the files will reveal "history" file and "trace" file :
history holds all the commands executed, and trace looks like this :

That's all I can think of, HTH.