FTP的登录日志

FTP的登录日志

为ftp用户登录，添加登录日志：
[root@myzdl ~]# vim /etc/pam.d/vsftpd.virtual
#%PAM-1.0
auth required pam_shells.so
auth required pam_userdb.so db=/etc/vsftpd/vslogin
account required pam_userdb.so db=/etc/vsftpd/vslogin

[root@myzdl ~]# cat /var/log/audit/audit.log | grep acct | grep vsftpd |awk ‘{print $9" “$12” "$14 }’
acct=“qweq”   addr=27.38.37.98  res=failed’
acct=“qweqwe”  addr=27.38.37.98  res=failed’
acct=“myzdl”  addr=27.38.37.98  res=success’
acct=“myzdl”  addr=27.38.37.98  res=success’
acct=“myzdl”  addr=27.38.37.98  res=success’
acct=“qweq”  addr=27.38.37.98  res=failed’
acct=“123”  addr=27.38.37.98  res=failed’
acct=“44444”  addr=27.38.37.98  res=failed’
[root@myzdl ~]#