PNG  IHDRQgAMA a cHRMz&u0`:pQ<bKGDgmIDATxwUﹻ& ^CX(J I@ "% (** BX +*i"]j(IH{~R)[~>h{}gy)I$Ij .I$I$ʊy@}x.: $I$Ii}VZPC)I$IF ^0ʐJ$I$Q^}{"r=OzI$gRZeC.IOvH eKX $IMpxsk.쒷/&r[޳<v| .I~)@$updYRa$I |M.e JaֶpSYR6j>h%IRز if&uJ)M$I vLi=H;7UJ,],X$I1AҒJ$ XY XzI@GNҥRT)E@;]K*Mw;#5_wOn~\ DC&$(A5 RRFkvIR}l!RytRl;~^ǷJj اy뷦BZJr&ӥ8Pjw~vnv X^(I;4R=P[3]J,]ȏ~:3?[ a&e)`e*P[4]T=Cq6R[ ~ޤrXR Հg(t_HZ-Hg M$ãmL5R uk*`%C-E6/%[t X.{8P9Z.vkXŐKjgKZHg(aK9ڦmKjѺm_ \#$5,)-  61eJ,5m| r'= &ڡd%-]J on Xm|{ RҞe $eڧY XYrԮ-a7RK6h>n$5AVڴi*ֆK)mѦtmr1p| q:흺,)Oi*ֺK)ܬ֦K-5r3>0ԔHjJئEZj,%re~/z%jVMڸmrt)3]J,T K֦OvԒgii*bKiNO~%PW0=dii2tJ9Jݕ{7"I P9JKTbu,%r"6RKU}Ij2HKZXJ,妝 XYrP ެ24c%i^IK|.H,%rb:XRl1X4Pe/`x&P8Pj28Mzsx2r\zRPz4J}yP[g=L) .Q[6RjWgp FIH*-`IMRaK9TXcq*I y[jE>cw%gLRԕiFCj-ďa`#e~I j,%r,)?[gp FI˨mnWX#>mʔ XA DZf9,nKҲzIZXJ,L#kiPz4JZF,I,`61%2s $,VOϚ2/UFJfy7K> X+6 STXIeJILzMfKm LRaK9%|4p9LwJI!`NsiazĔ)%- XMq>pk$-$Q2x#N ؎-QR}ᶦHZډ)J,l#i@yn3LN`;nڔ XuX5pF)m|^0(>BHF9(cզEerJI rg7 4I@z0\JIi䵙RR0s;$s6eJ,`n 䂦0a)S)A 1eJ,堌#635RIgpNHuTH_SԕqVe ` &S)>p;S$魁eKIuX`I4춒o}`m$1":PI<[v9^\pTJjriRŭ P{#{R2,`)e-`mgj~1ϣLKam7&U\j/3mJ,`F;M'䱀 .KR#)yhTq;pcK9(q!w?uRR,n.yw*UXj#\]ɱ(qv2=RqfB#iJmmL<]Y͙#$5 uTU7ӦXR+q,`I}qL'`6Kͷ6r,]0S$- [RKR3oiRE|nӦXR.(i:LDLTJjY%o:)6rxzҒqTJjh㞦I.$YR.ʼnGZ\ֿf:%55 I˼!6dKxm4E"mG_ s? .e*?LRfK9%q#uh$)i3ULRfK9yxm܌bj84$i1U^@Wbm4uJ,ҪA>_Ij?1v32[gLRD96oTaR׿N7%L2 NT,`)7&ƝL*꽙yp_$M2#AS,`)7$rkTA29_Iye"|/0t)$n XT2`YJ;6Jx".e<`$) PI$5V4]29SRI>~=@j]lp2`K9Jaai^" Ԋ29ORI%:XV5]JmN9]H;1UC39NI%Xe78t)a;Oi Ҙ>Xt"~G>_mn:%|~ޅ_+]$o)@ǀ{hgN;IK6G&rp)T2i୦KJuv*T=TOSV>(~D>dm,I*Ɛ:R#ۙNI%D>G.n$o;+#RR!.eU˽TRI28t)1LWϚ>IJa3oFbu&:tJ*(F7y0ZR ^p'Ii L24x| XRI%ۄ>S1]Jy[zL$adB7.eh4%%누>WETf+3IR:I3Xה)3אOۦSRO'ٺ)S}"qOr[B7ϙ.edG)^ETR"RtRݜh0}LFVӦDB^k_JDj\=LS(Iv─aTeZ%eUAM-0;~˃@i|l @S4y72>sX-vA}ϛBI!ݎߨWl*)3{'Y|iSlEڻ(5KtSI$Uv02,~ԩ~x;P4ցCrO%tyn425:KMlD ^4JRxSهF_}شJTS6uj+ﷸk$eZO%G*^V2u3EMj3k%)okI]dT)URKDS 7~m@TJR~荪fT"֛L \sM -0T KfJz+nإKr L&j()[E&I ߴ>e FW_kJR|!O:5/2跌3T-'|zX ryp0JS ~^F>-2< `*%ZFP)bSn"L :)+pʷf(pO3TMW$~>@~ū:TAIsV1}S2<%ޟM?@iT ,Eūoz%i~g|`wS(]oȤ8)$ ntu`өe`6yPl IzMI{ʣzʨ )IZ2= ld:5+請M$-ї;U>_gsY$ÁN5WzWfIZ)-yuXIfp~S*IZdt;t>KūKR|$#LcԀ+2\;kJ`]YǔM1B)UbG"IRߊ<xܾӔJ0Z='Y嵤 Leveg)$znV-º^3Ւof#0Tfk^Zs[*I꯳3{)ˬW4Ւ4 OdpbZRS|*I 55#"&-IvT&/윚Ye:i$ 9{LkuRe[I~_\ؠ%>GL$iY8 9ܕ"S`kS.IlC;Ҏ4x&>u_0JLr<J2(^$5L s=MgV ~,Iju> 7r2)^=G$1:3G< `J3~&IR% 6Tx/rIj3O< ʔ&#f_yXJiގNSz; Tx(i8%#4 ~AS+IjerIUrIj362v885+IjAhK__5X%nV%Iͳ-y|7XV2v4fzo_68"S/I-qbf; LkF)KSM$ Ms>K WNV}^`-큧32ŒVؙGdu,^^m%6~Nn&͓3ŒVZMsRpfEW%IwdǀLm[7W&bIRL@Q|)* i ImsIMmKmyV`i$G+R 0tV'!V)֏28vU7͒vHꦼtxꗞT ;S}7Mf+fIRHNZUkUx5SAJㄌ9MqμAIRi|j5)o*^'<$TwI1hEU^c_j?Е$%d`z cyf,XO IJnTgA UXRD }{H}^S,P5V2\Xx`pZ|Yk:$e ~ @nWL.j+ϝYb퇪bZ BVu)u/IJ_ 1[p.p60bC >|X91P:N\!5qUB}5a5ja `ubcVxYt1N0Zzl4]7­gKj]?4ϻ *[bg$)+À*x쳀ogO$~,5 زUS9 lq3+5mgw@np1sso Ӻ=|N6 /g(Wv7U;zωM=wk,0uTg_`_P`uz?2yI!b`kĸSo+Qx%!\οe|އԁKS-s6pu_(ֿ$i++T8=eY; צP+phxWQv*|p1. ά. XRkIQYP,drZ | B%wP|S5`~́@i޾ E;Չaw{o'Q?%iL{u D?N1BD!owPHReFZ* k_-~{E9b-~P`fE{AܶBJAFO wx6Rox5 K5=WwehS8 (JClJ~ p+Fi;ŗo+:bD#g(C"wA^ r.F8L;dzdIHUX݆ϞXg )IFqem%I4dj&ppT{'{HOx( Rk6^C٫O.)3:s(۳(Z?~ٻ89zmT"PLtw䥈5&b<8GZ-Y&K?e8,`I6e(֍xb83 `rzXj)F=l($Ij 2*(F?h(/9ik:I`m#p3MgLaKjc/U#n5S# m(^)=y=đx8ŬI[U]~SцA4p$-F i(R,7Cx;X=cI>{Km\ o(Tv2vx2qiiDJN,Ҏ!1f 5quBj1!8 rDFd(!WQl,gSkL1Bxg''՞^ǘ;pQ P(c_ IRujg(Wz bs#P­rz> k c&nB=q+ؔXn#r5)co*Ũ+G?7< |PQӣ'G`uOd>%Mctz# Ԫڞ&7CaQ~N'-P.W`Oedp03C!IZcIAMPUۀ5J<\u~+{9(FbbyAeBhOSܳ1 bÈT#ŠyDžs,`5}DC-`̞%r&ڙa87QWWp6e7 Rϫ/oY ꇅ Nܶըtc!LA T7V4Jsū I-0Pxz7QNF_iZgúWkG83 0eWr9 X]㾮݁#Jˢ C}0=3ݱtBi]_ &{{[/o[~ \q鯜00٩|cD3=4B_b RYb$óBRsf&lLX#M*C_L܄:gx)WΘsGSbuL rF$9';\4Ɍq'n[%p.Q`u hNb`eCQyQ|l_C>Lb꟟3hSb #xNxSs^ 88|Mz)}:](vbۢamŖ࿥ 0)Q7@0=?^k(*J}3ibkFn HjB׻NO z x}7p 0tfDX.lwgȔhԾŲ }6g E |LkLZteu+=q\Iv0쮑)QٵpH8/2?Σo>Jvppho~f>%bMM}\//":PTc(v9v!gոQ )UfVG+! 35{=x\2+ki,y$~A1iC6#)vC5^>+gǵ@1Hy٪7u;p psϰu/S <aʸGu'tD1ԝI<pg|6j'p:tպhX{o(7v],*}6a_ wXRk,O]Lܳ~Vo45rp"N5k;m{rZbΦ${#)`(Ŵg,;j%6j.pyYT?}-kBDc3qA`NWQū20/^AZW%NQ MI.X#P#,^Ebc&?XR tAV|Y.1!؅⨉ccww>ivl(JT~ u`ٵDm q)+Ri x/x8cyFO!/*!/&,7<.N,YDŽ&ܑQF1Bz)FPʛ?5d 6`kQձ λc؎%582Y&nD_$Je4>a?! ͨ|ȎWZSsv8 j(I&yj Jb5m?HWp=g}G3#|I,5v珿] H~R3@B[☉9Ox~oMy=J;xUVoj bUsl_35t-(ՃɼRB7U!qc+x4H_Qo֮$[GO<4`&č\GOc[.[*Af%mG/ ňM/r W/Nw~B1U3J?P&Y )`ѓZ1p]^l“W#)lWZilUQu`-m|xĐ,_ƪ|9i:_{*(3Gѧ}UoD+>m_?VPۅ15&}2|/pIOʵ> GZ9cmíتmnz)yߐbD >e}:) r|@R5qVSA10C%E_'^8cR7O;6[eKePGϦX7jb}OTGO^jn*媓7nGMC t,k31Rb (vyܴʭ!iTh8~ZYZp(qsRL ?b}cŨʊGO^!rPJO15MJ[c&~Z`"ѓޔH1C&^|Ш|rʼ,AwĴ?b5)tLU)F| &g٣O]oqSUjy(x<Ϳ3 .FSkoYg2 \_#wj{u'rQ>o;%n|F*O_L"e9umDds?.fuuQbIWz |4\0 sb;OvxOSs; G%T4gFRurj(֍ڑb uԖKDu1MK{1^ q; C=6\8FR艇!%\YÔU| 88m)֓NcLve C6z;o&X x59:q61Z(T7>C?gcļxѐ Z oo-08jہ x,`' ҔOcRlf~`jj".Nv+sM_]Zk g( UOPyεx%pUh2(@il0ݽQXxppx-NS( WO+轾 nFߢ3M<;z)FBZjciu/QoF 7R¥ ZFLF~#ȣߨ^<쩡ݛкvџ))ME>ώx4m#!-m!L;vv#~Y[đKmx9.[,UFS CVkZ +ߟrY٧IZd/ioi$%͝ب_ֶX3ܫhNU ZZgk=]=bbJS[wjU()*I =ώ:}-蹞lUj:1}MWm=̛ _ ¾,8{__m{_PVK^n3esw5ӫh#$-q=A̟> ,^I}P^J$qY~Q[ Xq9{#&T.^GVj__RKpn,b=`żY@^՝;z{paVKkQXj/)y TIc&F;FBG7wg ZZDG!x r_tƢ!}i/V=M/#nB8 XxЫ ^@CR<{䤭YCN)eKOSƟa $&g[i3.C6xrOc8TI;o hH6P&L{@q6[ Gzp^71j(l`J}]e6X☉#͕ ׈$AB1Vjh㭦IRsqFBjwQ_7Xk>y"N=MB0 ,C #o6MRc0|$)ف"1!ixY<B9mx `,tA>)5ػQ?jQ?cn>YZe Tisvh# GMމȇp:ԴVuږ8ɼH]C.5C!UV;F`mbBk LTMvPʍϤj?ԯ/Qr1NB`9s"s TYsz &9S%U԰> {<ؿSMxB|H\3@!U| k']$U+> |HHMLޢ?V9iD!-@x TIî%6Z*9X@HMW#?nN ,oe6?tQwڱ.]-y':mW0#!J82qFjH -`ѓ&M0u Uγmxϵ^-_\])@0Rt.8/?ٰCY]x}=sD3ojަЫNuS%U}ԤwHH>ڗjܷ_3gN q7[q2la*ArǓԖ+p8/RGM ]jacd(JhWko6ڎbj]i5Bj3+3!\j1UZLsLTv8HHmup<>gKMJj0@H%,W΃7R) ">c, xixј^ aܖ>H[i.UIHc U1=yW\=S*GR~)AF=`&2h`DzT󑓶J+?W+}C%P:|0H܆}-<;OC[~o.$~i}~HQ TvXΈr=b}$vizL4:ȰT|4~*!oXQR6Lk+#t/g lԁߖ[Jڶ_N$k*". xsxX7jRVbAAʯKҎU3)zSNN _'s?f)6X!%ssAkʱ>qƷb hg %n ~p1REGMHH=BJiy[<5 ǁJҖgKR*倳e~HUy)Ag,K)`Vw6bRR:qL#\rclK/$sh*$ 6덤 KԖc 3Z9=Ɣ=o>X Ώ"1 )a`SJJ6k(<c e{%kϊP+SL'TcMJWRm ŏ"w)qc ef꒵i?b7b('"2r%~HUS1\<(`1Wx9=8HY9m:X18bgD1u ~|H;K-Uep,, C1 RV.MR5άh,tWO8WC$ XRVsQS]3GJ|12 [vM :k#~tH30Rf-HYݺ-`I9%lIDTm\ S{]9gOڒMNCV\G*2JRŨ;Rҏ^ڽ̱mq1Eu?To3I)y^#jJw^Ńj^vvlB_⋌P4x>0$c>K†Aļ9s_VjTt0l#m>E-,,x,-W)سo&96RE XR.6bXw+)GAEvL)͞K4$p=Ũi_ѱOjb HY/+@θH9޼]Nԥ%n{ &zjT? Ty) s^ULlb,PiTf^<À] 62R^V7)S!nllS6~͝V}-=%* ʻ>G DnK<y&>LPy7'r=Hj 9V`[c"*^8HpcO8bnU`4JȪAƋ#1_\ XϘHPRgik(~G~0DAA_2p|J묭a2\NCr]M_0 ^T%e#vD^%xy-n}-E\3aS%yN!r_{ )sAw ڼp1pEAk~v<:`'ӭ^5 ArXOI驻T (dk)_\ PuA*BY]yB"l\ey hH*tbK)3 IKZ򹞋XjN n *n>k]X_d!ryBH ]*R 0(#'7 %es9??ښFC,ՁQPjARJ\Ρw K#jahgw;2$l*) %Xq5!U᢯6Re] |0[__64ch&_}iL8KEgҎ7 M/\`|.p,~`a=BR?xܐrQ8K XR2M8f ?`sgWS%" Ԉ 7R%$ N}?QL1|-эټwIZ%pvL3Hk>,ImgW7{E xPHx73RA @RS CC !\ȟ5IXR^ZxHл$Q[ŝ40 (>+ _C >BRt<,TrT {O/H+˟Pl6 I B)/VC<6a2~(XwV4gnXR ϱ5ǀHٻ?tw똤Eyxp{#WK qG%5],(0ӈH HZ])ג=K1j&G(FbM@)%I` XRg ʔ KZG(vP,<`[ Kn^ SJRsAʠ5xՅF`0&RbV tx:EaUE/{fi2;.IAwW8/tTxAGOoN?G}l L(n`Zv?pB8K_gI+ܗ #i?ޙ.) p$utc ~DžfՈEo3l/)I-U?aԅ^jxArA ΧX}DmZ@QLےbTXGd.^|xKHR{|ΕW_h] IJ`[G9{).y) 0X YA1]qp?p_k+J*Y@HI>^?gt.06Rn ,` ?);p pSF9ZXLBJPWjgQ|&)7! HjQt<| ؅W5 x W HIzYoVMGP Hjn`+\(dNW)F+IrS[|/a`K|ͻ0Hj{R,Q=\ (F}\WR)AgSG`IsnAR=|8$}G(vC$)s FBJ?]_u XRvύ6z ŨG[36-T9HzpW̞ú Xg큽=7CufzI$)ki^qk-) 0H*N` QZkk]/tnnsI^Gu't=7$ Z;{8^jB% IItRQS7[ϭ3 $_OQJ`7!]W"W,)Iy W AJA;KWG`IY{8k$I$^%9.^(`N|LJ%@$I}ֽp=FB*xN=gI?Q{٥4B)mw $Igc~dZ@G9K X?7)aK%݅K$IZ-`IpC U6$I\0>!9k} Xa IIS0H$I H ?1R.Чj:4~Rw@p$IrA*u}WjWFPJ$I➓/6#! LӾ+ X36x8J |+L;v$Io4301R20M I$-E}@,pS^ޟR[/s¹'0H$IKyfŸfVOπFT*a$I>He~VY/3R/)>d$I>28`Cjw,n@FU*9ttf$I~<;=/4RD~@ X-ѕzἱI$: ԍR a@b X{+Qxuq$IЛzo /~3\8ڒ4BN7$IҀj V]n18H$IYFBj3̵̚ja pp $Is/3R Ӻ-Yj+L;.0ŔI$Av? #!5"aʄj}UKmɽH$IjCYs?h$IDl843.v}m7UiI=&=0Lg0$I4: embe` eQbm0u? $IT!Sƍ'-sv)s#C0:XB2a w I$zbww{."pPzO =Ɔ\[ o($Iaw]`E).Kvi:L*#gР7[$IyGPI=@R 4yR~̮´cg I$I/<tPͽ hDgo 94Z^k盇΄8I56^W$I^0̜N?4*H`237}g+hxoq)SJ@p|` $I%>-hO0eO>\ԣNߌZD6R=K ~n($I$y3D>o4b#px2$yڪtzW~a $I~?x'BwwpH$IZݑnC㧄Pc_9sO gwJ=l1:mKB>Ab<4Lp$Ib o1ZQ@85b̍ S'F,Fe,^I$IjEdù{l4 8Ys_s Z8.x m"+{~?q,Z D!I$ϻ'|XhB)=…']M>5 rgotԎ 獽PH$IjIPhh)n#cÔqA'ug5qwU&rF|1E%I$%]!'3AFD/;Ck_`9 v!ٴtPV;x`'*bQa w I$Ix5 FC3D_~A_#O݆DvV?<qw+I$I{=Z8".#RIYyjǪ=fDl9%M,a8$I$Ywi[7ݍFe$s1ՋBVA?`]#!oz4zjLJo8$I$%@3jAa4(o ;p,,dya=F9ً[LSPH$IJYЉ+3> 5"39aZ<ñh!{TpBGkj}Sp $IlvF.F$I z< '\K*qq.f<2Y!S"-\I$IYwčjF$ w9 \ߪB.1v!Ʊ?+r:^!I$BϹB H"B;L'G[ 4U#5>੐)|#o0aڱ$I>}k&1`U#V?YsV x>{t1[I~D&(I$I/{H0fw"q"y%4 IXyE~M3 8XψL}qE$I[> nD?~sf ]o΁ cT6"?'_Ἣ $I>~.f|'!N?⟩0G KkXZE]ޡ;/&?k OۘH$IRۀwXӨ<7@PnS04aӶp.:@\IWQJ6sS%I$e5ڑv`3:x';wq_vpgHyXZ 3gЂ7{{EuԹn±}$I$8t;b|591nءQ"P6O5i }iR̈́%Q̄p!I䮢]O{H$IRϻ9s֧ a=`- aB\X0"+5"C1Hb?߮3x3&gşggl_hZ^,`5?ߎvĸ%̀M!OZC2#0x LJ0 Gw$I$I}<{Eb+y;iI,`ܚF:5ܛA8-O-|8K7s|#Z8a&><a&/VtbtLʌI$I$I$I$I$I$IRjDD%tEXtdate:create2022-05-31T04:40:26+00:00!Î%tEXtdate:modify2022-05-31T04:40:26+00:00|{2IENDB`Mini Shell

HOME


Mini Shell 1.0
DIR:/proc/self/root/usr/share/doc/proftpd/modules/
Upload File :
Current File : //proc/self/root/usr/share/doc/proftpd/modules/mod_log.html
<!DOCTYPE html>
<html>
<head>
<title>ProFTPD module mod_log</title>
</head>

<body bgcolor=white>

<hr>
<center>
<h2><b>ProFTPD module <code>mod_log</code></b></h2>
</center>
<hr><br>

<p>
This module is contained in the <code>mod_log.c</code> file for
ProFTPD 1.3.<i>x</i>, and is compiled by default.

<h2>Directives</h2>
<ul>
  <li><a href="#AllowLogSymlinks">AllowLogSymlinks</a>
  <li><a href="#ExtendedLog">ExtendedLog</a>
  <li><a href="#LogFormat">LogFormat</a>
  <li><a href="#LogOptions">LogOptions</a>
  <li><a href="#ServerLog">ServerLog</a>
  <li><a href="#SystemLog">SystemLog</a>
</ul>

<hr>
<h3><a name="AllowLogSymlinks">AllowLogSymlinks</a></h3>
<strong>Syntax:</strong> AllowLogSymlinks <em>on|off</em><br>
<strong>Default:</strong> None<br>
<strong>Context:</strong> server config, <code>&lt;VirtualHost&gt;</code>, <code>&lt;Global&gt;</code><br>
<strong>Module:</strong> mod_log<br>
<strong>Compatibility:</strong> 1.2.2rc2 and later

<p>
By default, the server will the path of any configured
<a href="#SystemLog"><code>SystemLog</code></a>, any configured
<a href="mod_core.html#TransferLog"><code>TransferLog</code></a>s, and any
configured <a href="#ExtendedLog"><code>ExtendedLog</code></a>s to see if they
are symbolic links. If the paths <i>are</i> symbolic links, <code>proftpd</code>
will refuse to log to that link unless explicitly configured to do so via
this <code>AllowLogSymlinks</code> directive.

<p>
<b>Security Note</b>: This behaviour should not be allowed unless for a very
good reason.  By allowing the server to open symbolic links with its root
privileges, you are allowing a potential symlink attack where the server could
be tricked into overwriting arbitrary system files. <i>You have been
warned.</i>

<p>
<hr>
<h3><a name="ExtendedLog">ExtendedLog</a></h3>
<strong>Syntax:</strong> ExtendedLog <em>path [cmd-classes [format-name]]</em><br>
<strong>Default:</strong> None<br>
<strong>Context:</strong> server config, <code>&lt;VirtualHost&gt;</code>, <code>&lt;Global&gt;</code>, <code>&lt;Anonymous&gt;</code><br>
<strong>Module:</strong> mod_log<br>
<strong>Compatibility:</strong> 1.1.6p11 and later

<p>
The <code>ExtendedLog</code> directive allows customizable logfiles to be
generated, either globally or per <code>&lt;VirtualHost&gt;</code>.  The
<em>path</em> argument should contain an absolute pathname to a logfile which
will be appended to when <code>proftpd</code> starts; the pathname should
<b>not</b> be to a file in a nonexistent directory, to a world-writable
directory, or be a symbolic link (unless
<a href="#AllowLogSymlinks"><code>AllowLogSymlinks</code></a> is set to
<em>on</em>). Multiple logfiles, potentially with different command classes and
formats) can be created. Optionally, the <em>cmd-classes</em> parameter can be
used to control which types of commands are logged.  If no command classes are
specified, <code>proftpd</code> logs all commands by default.
<b>Note</b> that passwords are hidden.  If used, the <em>cmd-classes</em>
parameter is a comma-delimited (with <b>no whitespace</b>) list of which
commands to log.

<p>
In <code>proftpd-1.2.8rc1</code> and later, the <em>path</em> argument can
be of the form &quot;syslog:<i>level</i>&quot;.  The &quot;syslog:&quot; prefix
configures <code>mod_log</code> to write the <code>ExtendedLog</code> data
to syslog rather than to a file.  The <i>level</i> configures the syslog
level at which to log the data.  For example:
<pre>
  ExtendedLog syslog:info ALL default
</pre>

<p>
This table shows the supported command classes:
<p>
<table border=1 summary="Command Classes">
  <tr>
    <td><b>Command Class</b></td>
    <td><b>FTP Commands</b></td>
  </tr>

  <tr>
    <td><code>ALL</code></td>
    <td>All commands <i>except</i> the <code>EXIT</code> pseudo-command (<i>default</i>)</td>
  </tr>

  <tr>
    <td><code>NONE</code></td>
    <td>No commands</td>
  </tr>

  <tr>
    <td><code>AUTH</code></td>
    <td>Authentication commands: <code>ACCT</code>, <code>PASS</code>,
      <code>REIN</code>, <code>USER</code></td>
  </tr>

  <tr>
    <td><code>INFO</code></td>
    <td>Informational commands: <code>FEAT</code>, <code>HELP</code>,
      <code>MDTM</code>, <code>QUIT</code>, <code>PWD</code>, <code>STAT</code>,
      <code>SIZE</code>, <code>SYST</code>, <code>XPWD</code></td>
  </tr>

  <tr>
    <td><code>DIRS</code></td>
    <td>Directory commands: <code>CDUP</code>, <code>CWD</code>,
      <code>LIST</code>, <code>MKD</code>, <code>MLSD</code>, <code>MLST</code>,
      <code>NLST</code>, <code>RMD</code>, <code>XCWD</code>, <code>XCUP</code>,
      <code>XMKD</code>, <code>XRMD</code></td>
  </tr>

  <tr>
    <td><code>READ</code></td>
    <td>File reading: <code>RETR</code></td>
  </tr>

  <tr>
    <td><code>WRITE</code></td>
    <td>File/directory writing or creation: <code>APPE</code>, <code>MFF</code>,
      <code>MFMT</code>, <code>MKD</code>, <code>RMD</code>, <code>RNFR</code>,
      <code>RNTO</code>, <code>STOR</code>, <code>STOU</code>,
      <code>XMKD</code>, <code>XRMD</code></td>
  </tr>

  <tr>
    <td><code>MISC</code></td>
    <td>Miscellaneous commands: <code>ABOR</code>, <code>ALLO</code>,
      <code>EPRT</code>, <code>EPSV</code>, <code>MODE</code>,
      <code>NOOP</code>, <code>OPTS</code>, <code>PASV</code>,
      <code>PORT</code>, <code>REST</code>, <code>RNFR</code>,
      <code>RNTO</code>, <code>SITE</code>, <code>SMNT</code>,
      <code>STRU</code>, <code>TYPE</code></td>
  </tr>

  <tr>
    <td><code>SEC</code></td>
    <td>RFC2228-related security FTP commands: <code>AUTH</code>,
      <code>CCC</code>, <code>PBSZ</code>, <code>PROT</code></td>
  </tr>

  <tr>
    <td><code>EXIT</code></td>
    <td>Logs the configured <code>LogFormat</code> at session exit.<br>
        <b>NOTE</b>: <code>EXIT</code> is <b>not</b> part of the
        <code>ALL</code> command class, in order to preserve
        backward-compatible <code>ALL</code> behavior.</td>
  </tr>
</table>

<p>
If a <em>format-name</em> parameter is used, <code>ExtendedLog</code> will
use the named <a href="#LogFormat"><code>LogFormat</code></a>. Otherwise, the
default format of "%h %l %u %t \"%r\" %s %b" is used.

<p>
For example, to log all read and write operations to
<code>/var/log/ftp.log</code> using the default format, use:
<pre>
  ExtendedLog /var/log/ftp.log READ,WRITE
</pre>
and to log all read and write operations to <code>/var/log/ftp.log</code>
using your own <code>LogFormat</code> named "custom", use:
<pre>
  LogFormat custom ...
  ExtendedLog /var/log/ftp.log READ,WRITE custom
</pre>

<p>
See also: <a href="#AllowLogSymlinks"><code>AllowLogSymlinks</code></a>,
<a href="#LogFormat"><code>LogFormat</code></a>,
<a href="mod_core.html#TransferLog"><code>TransferLog</code></a>

<p>
<hr>
<h3><a name="LogFormat">LogFormat</a></h3>
<strong>Syntax:</strong> LogFormat <em>format-name format-string</em><br>
<strong>Default:</strong> LogFormat default "%h %l %u %t \"%r\" %s %b"<br>
<strong>Context:</strong> server config, <code>&lt;Global&gt;</code><br>
<strong>Module:</strong> mod_log<br>
<strong>Compatibility:</strong> 1.1.6p11 and later

<p>
The <code>LogFormat</code> directive can be used to create a custom logging
format for use with the <a href="#ExtendedLog"><code>ExtendedLog</code></a>
directive.  Once created, the format can be referenced by the specified
<em>format-name</em>. The <em>format-string</em> parameter can consist of
any combination of letters, numbers and symbols. The special character '%' is
used to start a meta sequence/variable (see below). To insert a literal '%'
character, use "%%".

<p>
The default <code>LogFormat</code> is:
<pre>
  "%h %l %u %t \"%r\" %s %b"
</pre>
which produces log entries in the <a href="http://www.w3.org/Daemon/User/Config/Logging.html#common-logfile-format">Common Log Format</a>.

<p>
The following meta sequences/variables are available and are replaced as
indicated when logging.

<p>
<table border=1 summary="LogFormat Variables">
  <tr>
    <td><b>Variable</b></td>
    <td><b>Value</b></td>
  </tr>

  <tr>
    <td>&nbsp;<code>%a</code>&nbsp;</td>
    <td>Remote client IP address</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%A</code>&nbsp;</td>
    <td>Anonymous login password, or "UNKNOWN" for regular logins</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%{basename}</code>&nbsp;</td>
    <td>Last component of path, <i>i.e.</i> just the file or directory name.</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%b</code>&nbsp;</td>
    <td>Number of bytes sent for this command</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%c</code>&nbsp;</td>
    <td>Client connection class, or "-" if undefined</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%d</code>&nbsp;</td>
    <td>Directory name (<i>not</i> full path) for: <code>CDUP</code>,
      <code>CWD</code>, <code>LIST</code>, <code>MLSD</code>, <code>MKD</code>,
      <code>NLST</code>, <code>RMD</code>, <code>XCWD</code>, <code>XCUP</code>,
      <code>XMKD</code>, <code>XRMD</code></td>
  </tr>

  <tr>
    <td>&nbsp;<code>%D</code>&nbsp;</td>
    <td>Directory path (full path) for: <code>CDUP</code>,
      <code>CWD</code>, <code>LIST</code>, <code>MLSD</code>, <code>MKD</code>,
      <code>NLST</code>, <code>RMD</code>, <code>XCWD</code>, <code>XCUP</code>,
      <code>XMKD</code>, <code>XRMD</code></td>
  </tr>

  <tr>
    <td>&nbsp;<code>%E</code>&nbsp;</td>
    <td>End-of-session reason</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%{epoch}</code>&nbsp;</td>
    <td>Unix epoch; seconds since January 1, 1970</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%{<em>NAME</em>}e</code>&nbsp;</td>
    <td>Contents of environment variable <em>NAME</em></td>
  </tr>

  <tr>
    <td>&nbsp;<code>%f</code>&nbsp;</td>
    <td>Absolute path of the filename stored or retrieved (not chrooted)</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%F</code>&nbsp;</td>
    <td>Filename stored or retrieved, as the client sees it</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%{file-modified}</code>&nbsp;</td>
    <td>Indicates whether a file is modified (<i>i.e.</i> already exists): "true" or "false"</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%{file-size}</code>&nbsp;</td>
    <td>Indicates the file size <b>after</b> data transfer, or "-" if not applicable</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%{gid}</code>&nbsp;</td>
    <td>GID of authenticated user</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%g</code>&nbsp;</td>
    <td>Primary group of authenticated user</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%h</code>&nbsp;</td>
    <td>Remote client DNS name</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%H</code>&nbsp;</td>
    <td>Local IP address of vhost/server hosting/handling the session</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%I</code>&nbsp;</td>
    <td>Total number of "raw" bytes read in from network</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%{iso8601}</code>&nbsp;</td>
    <td>shorthand form of <code>%{%Y-%m-%d %H:%M:%S}t,%{millisecs}</code>, <i>e.g.</i> "2013-01-30 20:14:05,670"</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%J</code>&nbsp;</td>
    <td>Command arguments received from client, <i>e.g.</i> "file.txt"</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%l</code>&nbsp;</td>
    <td>Remote username (from <code>identd</code>), or "UNKNOWN" if IdentLookup
      failed</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%L</code>&nbsp;</td>
    <td>Local IP address contacted by client</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%m</code>&nbsp;</td>
    <td>Command (method) name received from client, <i>e.g.</i> <code>RETR</code></td>
  </tr>

  <tr>
    <td>&nbsp;<code>%{microsecs}</code>&nbsp;</td>
    <td>6 digit value of the microseconds of the current time</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%{millisecs}</code>&nbsp;</td>
    <td>3 digit value of the milliseconds of the current time</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%O</code>&nbsp;</td>
    <td>Total number of "raw" bytes written out to network</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%p</code>&nbsp;</td>
    <td>Local port</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%P</code>&nbsp;</td>
    <td>Local server process ID (pid)</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%{protocol}</code>&nbsp;</td>
    <td>Current protocol: "ftp", "ftps", "ssh2", "sftp", "scp"</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%r</code>&nbsp;</td>
    <td>Full command received from client</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%R</code>&nbsp;</td>
    <td>Response time, in milliseconds</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%{remote-port}</code>&nbsp;</td>
    <td>Remote client port</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%s</code>&nbsp;</td>
    <td>Numeric FTP response code (status); see <a href="http://www.faqs.org/rfcs/rfc959.html">RFC 959</a> Section 4.2.1</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%S</code>&nbsp;</td>
    <td>Response message sent to client (available since 1.3.1rc1)</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%t</code>&nbsp;</td>
    <td>Current local time</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%{<em>format</em>}t</code>&nbsp;</td>
    <td>Current local time using <code>strftime(3)</code> <em>format</em></td>
  </tr>

  <tr>
    <td>&nbsp;<code>%T</code>&nbsp;</td>
    <td>Time taken to transfer file, in seconds</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%{transfer-failure}</code>&nbsp;</td>
    <td>Reason for data transfer failure (if applicable), or "-"</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%{transfer-millisecs}</code>&nbsp;</td>
    <td>Time taken to transfer file, in milliseconds</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%{transfer-port}</code>&nbsp;</td>
    <td>Remote port used for data transfer</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%{transfer-status}</code>&nbsp;</td>
    <td>Status of data transfer: "success", "failed", "cancelled", "timeout", or "-"</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%{transfer-type}</code>&nbsp;</td>
    <td>Data transfer type: "binary" or "ASCII" (if applicable), or "-"</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%u</code>&nbsp;</td>
    <td>Authenticated local username</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%U</code>&nbsp;</td>
    <td><code>USER</code> name originally sent by client</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%{uid}</code>&nbsp;</td>
    <td>UID of authenticated user</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%v</code>&nbsp;</td>
    <td>Local server <code>ServerName</code></td>
  </tr>

  <tr>
    <td>&nbsp;<code>%V</code>&nbsp;</td>
    <td>Local server DNS name</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%{version}</code>&nbsp;</td>
    <td>ProFTPD version</td>
  </tr>

  <tr>
    <td>&nbsp;<code>%w</code>&nbsp;</td>
    <td>Absolute path for the <code>RNFR</code> path ("whence" a rename comes)</td>
  </tr>
</table>

<p>
See also: <a href="#ExtendedLog"><code>ExtendedLog</code></a>,
<a href="mod_core.html#TransferLog"><code>TransferLog</code></a>

<p>
<hr>
<h3><a name="LogOptions">LogOptions</a></h3>
<strong>Syntax:</strong> LogOptions <em>opt1 ... optN</em><br>
<strong>Default:</strong> None<br>
<strong>Context:</strong> server config, &lt;VirtualHost&gt;, &lt;Global&gt;<br>
<strong>Module:</strong> mod_core<br>
<strong>Compatibility:</strong> 1.3.7rc4 and later

<p>
The <code>LogOptions</code> directive can be used to change the format
of the <a href="#SystemLog"><code>SystemLog</code></a> messages, <i>e.g.</i>
adding/remove certain fields of data.  These options <i>also</i> apply to
all module logging; ProFTPD logging is centralized, and the
<code>LogOptions</code> are applied to any/all logging.

<p>
The options supported by the <code>LogOptions</code> directive are:
<ul>
  <li>Hostname
  <li>RoleBasedProcessLabels
  <li>Timestamp
  <li>VirtualHost
</ul>
All of these options are <em>enabled</em> by default, <i>except</i> for the
<code>RoleBasedProcessLabels</code> option.

<p>
To enable an option, preface the option name with a '+' (plus) character;
to disable the option, use a '-' (minus) character prefix.  For example:
<pre>
  # Log messages without timestamps or hostname
  LogOptions -Hostname -Timestamp
</pre>

<p>
The <code>RoleBasedProcessLabels</code> option changes the <em>label</em>
just for the PID, from <i>e.g.</i>:
<pre>
  proftpd[1234]
</pre>
to one of the following, depending on whether the process is the master
<em>daemon</em> process, or a forked <em>session</em> process:
<pre>
  daemon[2345]
  session[34567]
</pre>
This is useful, for example, when relying on <code>systemd</code> logging:
<pre>
  LogOptions -Timestamp -Hostname +RoleBasedProcessLabels
</pre>

<p>
<hr>
<h3><a name="ServerLog">ServerLog</a></h3>
<strong>Syntax:</strong> ServerLog <em>path</em>|"none"<br>
<strong>Default:</strong> None<br>
<strong>Context:</strong> server config, <code>&lt;VirtualHost&gt;</code>, <code>&lt;Global&gt;</code><br>
<strong>Module:</strong> mod_log<br>
<strong>Compatibility:</strong> 1.2.8rc1 and later

<p>
The <code>ServerLog</code> directive is used to configure a
<code>&lt;VirtualHost&gt;</code>-specific logfile at the given <em>path</em>,
rather than a single <a href="#SystemLog"><code>SystemLog</code></a> for the
entire configuration.

<p>
A <em>path</em> value of "none" will disable file logging for that vhost;
this can be used to override a global <code>ServerLog</code> setting.

<p>
<hr>
<h3><a name="SystemLog">SystemLog</a></h3>
<strong>Syntax:</strong> SystemLog <em>path</em>|"none"<br>
<strong>Default:</strong> None<br>
<strong>Context:</strong> server config, <code>&lt;Global&gt;</code><br>
<strong>Module:</strong> mod_log<br>
<strong>Compatibility:</strong> 1.1.6p11 and later

<p>
The <code>SystemLog</code> directive disables ProFTPD's use of the
<code>syslog</code> mechanism and instead redirects all logging output to the
specified <em>path</em>.  The <em>path</em> should contain an absolute path,
and should not be to a file in a nonexistent directory, in a world-writable
directory, or be a symbolic link (unless
<a href="#AllowLogSymlinks"><code>AllowLogSymlinks</code></a> is set to
<em>on</em>).

<p>
Use of this directive overrides any facility set by the
<a href="mod_core.html#SyslogFacility"><code>SyslogFacility</code></a>
directive.

<p>
A <em>path</em> value of "none" will disable logging for the entire daemon.

<p>
<hr>
<h2><a name="Installation">Installation</a></h2>
The <code>mod_log</code> module is compiled by default.

<p>
<hr>
<h2><a name="Usage">Usage</a></h2>
<p>

<p><a name="FAQ">
<b>Frequently Asked Questions</b><br>

<p>
<font color=red>Question</font>: Why are successful logins no longer being
logged, after upgrading to ProFTPD 1.3.6, even though I am using the
<code>SystemLog</code> directive?<br>
<font color=blue>Answer</font>: The default log level was changed from
<code>DEBUG</code> to <code>NOTICE</code> in ProFTPD 1.3.6; see
<a href="http://bugs.proftpd.org/show_bug.cgi?id=3983">Bug#3983</a>.  And
the "Login successful" log message is logged at the <code>INFO</code> level,
which means that it will <em>not</em> be logged by default.

<p>
Why not?  The <code>INFO</code> log level is for "normal operating conditions"
(see the <a href="../howto/LogLevels.html">log levels</a> howto), and successful
logins are considered normal, and thus are not noteworthy or needed for logging.
<em>Failed</em> logins, however, <em>are</em> logged at the <code>NOTICE</code>
log level.

<p>
For having successful logins logged once more, use the following in your
<code>proftpd.conf</code>:
<pre>
  SyslogLevel INFO
</pre>

<p>
<font color=red>Question</font>: I have configured ProFTPD to use DNS names
in my <code>proftpd.conf</code> using:
<pre>
  UseReverseDNS on
</pre>
But in my <code>ExtendedLog</code>, I still see IP addresses rather than the
DNS names I expect to see.  How can that happen?<br>
<font color=blue>Answer</font>: The
<a href="#LogFormat"><code>LogFormat</code></a> <code>%h</code> is what is used
to log DNS names.  The logged value might be an IP address if ProFTPD cannot
properly verify that the client IP address resolves to a DNS name.

<p>
"Properly verifying" an IP address, in this case, means resolving the DNS name
for an IP address <em>and then resolving that DNS name back to its IP
addresses</em>:
<pre>
  $ host 10.1.2.3
  3.2.1.10.in-addr.arpa domain name pointer host.domain.example.com.
  $ host host.domain.example.com
  host.domain.example.com has address 10.4.5.6
</pre>
In this example, the IP address 10.1.2.3 does not resolve back to itself via
DNS, but rather to a <i>different</i> IP address.

<p>
If the DNS name does not resolve back to the original IP address, then that
DNS name is <b>not used</b>, as that DNS name is considered "unreliable"; only
<em>reliable</em> information is logged (and used elsewhere).  Thus ProFTPD
resorts to logging just the client IP address for the <code>%h</code> variable,
rather than the DNS name, in these situations.

<p>
<font color=red>Question</font>: How can I get the reason a client was
disconnected, for whatever reason, logged to my <code>ExtendedLog</code>?<br>
<font color=blue>Answer</font>: You can use the <code>%E</code>
<a href="#LogFormat"><code>LogFormat</code></a> variable for this, <b>in
conjunction with</b> the <code>EXIT</code> log class.

<p>
For example, assume you have configured the following:
<pre>
  MaxConnectionsPerUser 2
</pre>
and you would like your <code>ExtendedLog</code> to record when this limit
is reached.  To do this, you would use something like the following:
<pre>
  LogFormat eos "%a: user=%U disconnect_reason=\"%E\""
  ExtendedLog /var/log/proftpd/ext.log EXIT eos
</pre>
Of course, you can include other logging classes than just <code>EXIT</code>;
the above is just an example.

<p>
With the above, when the <code>MaxConnectionsPerUser</code> is reached,
your log would have a line like:
<pre>
  127.0.0.1: user=tj disconnect_reason="Denied by MaxConnectionsPerUser"
</pre>

<p>
<hr>
<font size=2><b><i>
&copy; Copyright 2002-2022 The ProFTPD Project<br>
 All Rights Reserved<br>
</i></b></font>

<hr>
</body>
</html>