Chapter 12. FTP Reports

Table of Contents

Supported Log Format
Microsoft Internet Information Server
Xferlog
Report Descriptions and Configuration
Top Remote Host FTP Report
Bytes by Period FTP Report
Bytes by User by Period FTP Report
Bytes by Period by User FTP Report
Bytes by Direction by User with count by Period FTP Report
Top Files FTP Report
Top Uploaded Files FTP Report
Top Downloaded Files FTP Report
Top Users FTP Report
Top by User (Bytes Transferred) FTP Report
Tracked Users FTP Report
Tracked Files FTP Report
Number of Transfers by Direction FTP Report
Number of Transfers by Transfer Type FTP Report
Each Transfer by Filename Report
Filter Descriptions and Configuration

Supported Log Format

Lire supports the widely used xferlog FTP file transfer log files and logs from the FTP service of Microsoft Internet Information Server™.

Microsoft Internet Information Server

The FTP log file from Microsoft Internet Information Server™ is a variant of the W3C Extended Log Format defined at http://www.w3.org/TR/WD-logfile.html.

Lire can use the following fields of the format: date, time, c-ip, c-dns, cs-bytes, time-taken, cs-uri-stem and cs-method. The other fields will be ignored.

Example 12.1. Microsoft Internet Information Server™ FTP Log Sample


#Software: Microsoft Internet Information Server 4.0
#Version: 1.0
#Date: 2001-11-29 00:01:32
#Fields: time c-ip cs-method cs-uri-stem sc-status
00:01:32 10.0.0.1 [56]created spacedat/091001092951LGW_Data.zip 226
00:01:32 10.0.0.1 [56]created spacedat/html/bx01g01.gif 226
00:01:32 10.0.0.1 [56]created spacedat/html/catlogo.gif 226
00:01:32 10.0.0.1 [56]QUIT - 226
00:03:32 10.0.0.1 [58]USER badm 331
00:03:32 10.0.0.1 [58]PASS - 230

	    

Xferlog

The xferlog format is supported by a wide range of FTP servers like Wu-Ftpd™, ProFTPD™ or standard BSD ftpd.

Example 12.2. Xferlog Log Sample

Mon Feb 26 09:48:18 2001 1 1.example.com 147456 \
    /var/ftp/pubinfo/sm2/esc/s82e5937.jpg b _ o a \
    john.doe.1@1.mail.example.com ftp 0 * i
Mon Feb 26 10:26:31 2001 1 2.example.com 10593 \
    /var/html/public/htdocs/pubinfo/pr/1999/28/extra-photos.html \
    a _ i r kellys ftp 0 * c
Mon Feb 26 10:27:50 2001 1 2.example.com 14 \
    /var/html/public/htdocs/pubinfo/pr/1999/28/extra-photos.html.LCK \
    a _ i r kellys ftp 0 * c
Mon Feb 26 10:28:17 2001 1 2.example.com 14 \
    /var/html/public/htdocs/pubinfo/pr/1999/28/extra-photos.html.LCK \
    a _ o r kellys ftp 0 * c
Mon Feb 26 10:28:18 2001 1 2.example.com 10591 \
    /var/html/public/htdocs/pubinfo/pr/1999/28/extra-photos.html \
    a _ i r kellys ftp 0 * c
Mon Feb 26 12:51:02 2001 2 3.example.com 43063 \
    /var/ftp/pubinfo/jpeg/EtaCar3d.jpg  b _ o a mozilla@ ftp 0 * c
Mon Feb 26 12:51:17 2001 2 3.example.com 37332 \
    /var/ftp/pubinfo/jpeg/EtaCarC.jpg b _ o a mozilla@ ftp 0 * c
Mon Feb 26 12:51:52 2001 6 3.example.com 62823 \
    /var/ftp/pubinfo/jpeg/EtaCarD.jpg b _ o a mozilla@ ftp 0 * c
Mon Feb 26 12:52:31 2001 2 3.example.com 33660 \
    /var/ftp/pubinfo/jpeg/Neptune.jpg b _ o a mozilla@ ftp 0 * c
Mon Feb 26 12:52:43 2001 2 3.example.com 26295 \
    /var/ftp/pubinfo/jpeg/NeptDS.jpg b _ o a mozilla@ ftp 0 * c