Ftp – How to Read a Pure FTPD log file

ftppureftpd

I'm trying to analyze my FTP log to investigate some unauthorized access, but I can't make sense of some of the far right columns.

Thu Oct 01 00:13:55 2009 0 92.54.102.153 2547 /home/user1/public_html/index.html a _ o r user1 ftp 1 * c
Thu Oct 01 00:13:58 2009 0 77.252.189.148 2606 /home/user1/public_html/index.html a _ i r user1 ftp 1 * c

I can't find any documentation on how to read these logs.

Best Answer

Here is the website describing your log format. It has a good description of what every field in your log file means.