NAME

       xferlog - ProFTPD server logfile

DESCRIPTION

       The  xferlog  file  contains  logging  information from the FTP server daemon, proftpd(8).
       This file usually is found in /var/log but can be located anywhere by using  a  proftpd(8)
       configuration  directive.  Each server entry is composed of a single line of the following
       form, with all fields being separated by spaces.

              current-time   transfer-time   remote-host   file-size   filename   transfer-type
              special-action-flag      direction      access-mode     username     service-name
              authentication-method   authenticated-user-id  completion-status

       current-time        is the current local time in the form  "DDD  MMM  dd  hh:mm:ss  YYYY".
                           Where  DDD  is the day of the week, MMM is the month, dd is the day of
                           the month, hh is the hour, mm is the minutes, ss is the  seconds,  and
                           YYYY is the year.

       transfer-time       is the total time in seconds for the transfer.

       remote-host         is the remote host name.

       file-size           is the size of the transferred file in bytes.

       filename            is  the  name  of  the transferred file.  If the filename contains any
                           spaces or control characters, each such character is  replaced  by  an
                           underscore ('_') character.

       transfer-type       is a single character indicating the type of transfer. Can be one of:
                                  a         for an ascii transfer
                                  b         for a binary transfer

       special-action-flag is  one  or  more single character flags indicating any special action
                           taken.  Can be one or more of:
                                  C         file was compressed
                                  U         file was uncompressed
                                  T         file was tar'ed
                                  _         no action was taken

       direction           is the direction of the transfer. Can be one of:
                                  o         outgoing
                                  i         incoming
                                  d         deleted

       access-mode         is the method by which the user is logged in. Can be one of:
                                  a         (anonymous) is for an anonymous guest user.
                                  r         (real) is for a local authenticated user.

       username            is the local username, or if guest, the ID string given.

       service-name        is the name of the service being invoked, usually FTP.

       authentication-method
                           is the method of authentication used. Can be one of:
                                  0         none
                                  1         RFC931 Authentication

       authenticated-user-id
                           is the user id returned by the authentication method.  A * is used  if
                           an authenticated user id is not available.

       completion-status   is  a  single character indicating the status of the transfer.  Can be
                           one of:
                                  c         complete transfer
                                  i         incomplete transfer

FILES

       /var/log/xferlog

AUTHORS

       ProFTPD is written and maintained by a number of people, full  credits  can  be  found  on
       http://www.proftpd.org/credits.html

SEE ALSO

       proftpd(8)

       Full  documentation  on  ProFTPD,  including  configuration  and  FAQs,  is  available  at
       http://www.proftpd.org/

       For    help/support,    try     the     ProFTPD     mailing     lists,     detailed     on
       http://www.proftpd.org/lists.html

       Report bugs at http://bugs.proftpd.org/

                                                                                       XFERLOG(5)