Understanding IIS FTP Log

Filezilla Probleme - Server Support Forum

Filezilla Probleme - Server Support Forum — Sun, 03 Feb 2008 14:44:07 GMT

Pingback from Filezilla Probleme - Server Support Forum

re: Understanding IIS FTP Log

qbernard — Wed, 12 Jul 2006 03:46:33 GMT

Hi Jewel,

Interesting, I have not any 530 for 'pass' event withouth 331 username input. can you post your log file here?

re: Understanding IIS FTP Log

yan — Tue, 11 Jul 2006 02:11:53 GMT

Hello,

for see your log go to :

C:\WINDOWS\system32\Logfiles\MSFTPSVC1

re: Understanding IIS FTP Log

jewel — Mon, 10 Jul 2006 10:37:26 GMT

Thanks for u, this article really help me for understanding iis log.
I am intresting about 530 event. Can be this event alone... without 331 event i.e. somebody can pass user identyfication and try to login entering password only?

re: Understanding IIS FTP Log

bernard — Tue, 12 Jul 2005 12:38:00 GMT

IDS?

re: Understanding IIS FTP Log

bernard — Mon, 11 Jul 2005 15:55:00 GMT

In this case, do you have special software installed in the machine? antivirus, IDS, or ? Does this happen to your machine only? what about other client workstation? same issue. If it's your machine alone, then you need to know what's in the box that manipulating the incoming ftp packets.

re: Understanding IIS FTP Log

bernard — Mon, 11 Jul 2005 12:55:00 GMT

OK, whatever program I use to download files from my IIS FTP server I can successfully download them to the client. But all files that have been downloaded appears in that strange naming format also on drive c:\ of the server. Looks like there is something logging every FTP access of my server.

re: Understanding IIS FTP Log

bernard — Fri, 01 Jul 2005 15:15:00 GMT

Are you saying when you download from your IIS FTP server, those downloaded files appear in strange format? How do you download? have you try download it via ftp.exe ?

C:\> ftp localhost

login, do a dir listing, set the transer mode (ascii / binary), mget the file.

what file you are downloading anyway?

re: Understanding IIS FTP Log

bernard — Fri, 01 Jul 2005 09:45:00 GMT

Yes, I am using standard IIS FTP that come with XP Pro. Every file that is downloaded from my FTP server is appearing in this strange file format on c:\.

re: Understanding IIS FTP Log

bernard — Fri, 01 Jul 2005 02:18:00 GMT

Hi Thomas,

Are you using IIS FTP server that come with XP Pro? Are you saying you have mystery file in your c:\ ? are you uploading or downloading ? You might want to post this question with more information in public IIS newsgroups.

re: Understanding IIS FTP Log

bernard — Fri, 01 Jul 2005 00:33:00 GMT

Q: I am using Windows XP FTP server. Every file that is downloaded from my FTP server is logged in my c:\ drive also. So after some days I find a lot of files named s1f4.3, s1f4.4, s1f4.5, s1f4.a, ... with the same content and size of the corresponding downloaded files. How can I disable this?