Fedora™ Unleashed, 2008 edition

filename	Name of the file.
transfer-type	A single character indicating the transfer type. The types are:
	a for ASCII transfers,
	b for binary transfers
special-action-flag	One or more character flags indicating any special action taken by the server. The values are:
	C for compressed files
	U for uncompressed files
	T for TARed files
	- for no special action taken
direction	Indicates whether the file was sent from or received by the server.
access-mode	The way in which the user logged in to the server. The values are:
	a for an anonymous guest user
	g for a guest user, corresponding to the guestgroup command in the /etc/ftpaccess file
	r for a real user on the local machine
username	If logged in as a real user, the username. If the access mode was guest, the password is given.
service-name	The name of the service used, usually FTP
authentication-method	Type of authentication used. The values are:
	0 for none
	1 for RFC931 authentication (a properly formed email address)
authenticated-user-id	This is the user ID returned to the server based on the authentication method used to access the server. An * is used when an authenticated user ID cannot be found.
completion-status	A single-character field indicating the status of the transfer. The values are:
	c for a completed transfer
	i for an incomplete transfer

An example of this file is seen in Listing 20.5.

LISTING 20.5 Sample /var/log/xferlog File with Inbound and Outbound Logging

Mon Sep 3 07:13:05 2001 1 localhost.localdomain 100 /var/ftp/pub/README b o a [email protected] ftp 0 * c
Mon Sep 3 02:35:35 2001 1 helios 8 /var/ftp/pub/configuration a _ o a [email protected] ftp 0 * c
Mon Sep 3 02:35:35 2001 1 helios 8 /var/ftp/pub/temp.txt a o a [email protected] ftp 0 * c
Mon Sep 3 02:35:35 2001 1 helios 8 /var/ftp/pub/tftp-server- 0.17-14.i386.rpm a o a [email protected] ftp 0 * c
Mon Sep 3 02:35:35 2001 1 helios 8 /var/ftp/pub/wu-ftpd-2.6.1- 22.i386.rpm a o a