FTP Messages in log files...

Discussion in 'General' started by BorderAmigos, Feb 11, 2010.

  1. BorderAmigos

    BorderAmigos New Member

    I just started getting the following in the messages log a couple days ago...
    Code:
    Feb 10 15:49:04 host pure-ftpd: ([email protected]) [INFO] New connection from localhost.localdomain
    Feb 10 15:49:04 host pure-ftpd: ([email protected]) [INFO] New connection from localhost.localdomain
    Feb 10 15:49:04 host pure-ftpd: ([email protected]) [INFO] Logout.
    Feb 10 15:49:04 host pure-ftpd: ([email protected]) [INFO] Logout.
    Feb 10 15:49:04 host sshd[15186]: Did not receive identification string from 127.0.0.1
    
    It is repeating every minute all the time. The only thing that runs every minute is the ISPConfig3 server.sh/php file. Along with this every minute is an entry in the auth log...
    Code:
    Feb 10 15:58:07 host sshd[15965]: Did not receive identification string from 127.0.0.1
    
    and the syslog...
    Code:
    Feb 10 15:59:01 host /USR/SBIN/CRON[15972]: (root) CMD (/usr/local/ispconfig/server/server.sh > /dev/null 2>> /var/log/ispconfig/cron.log)
    Feb 10 15:59:07 host imapd: Connection, ip=[::ffff:127.0.0.1]
    Feb 10 15:59:07 host imapd: Connection, ip=[::ffff:127.0.0.1]
    Feb 10 15:59:07 host imapd: Disconnected, ip=[::ffff:127.0.0.1], time=0
    Feb 10 15:59:07 host imapd: Disconnected, ip=[::ffff:127.0.0.1], time=0
    Feb 10 15:59:07 host pop3d: Connection, ip=[::ffff:127.0.0.1]
    Feb 10 15:59:07 host pop3d: Disconnected, ip=[::ffff:127.0.0.1]
    Feb 10 15:59:07 host pure-ftpd: ([email protected]) [INFO] New connection from localhost.localdomain
    Feb 10 15:59:07 host pure-ftpd: ([email protected]) [INFO] Logout.
    Feb 10 15:59:07 host postfix/smtpd[12254]: connect from localhost.localdomain[127.0.0.1]
    Feb 10 15:59:07 host postfix/smtpd[12254]: disconnect from localhost.localdomain[127.0.0.1]
    Feb 10 15:59:07 host pop3d-ssl: Unexpected SSL connection shutdown.
    
    Is all this normal? Is there a way to not log so much unneeded information or should it just be ignored? Thanks.
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Thats all normal. This is the system monitoring which check if all services are responding to requeststs.
     
  3. BorderAmigos

    BorderAmigos New Member

    The entry in the auth log only started a few days ago, not in last weeks logs. That's the one that got me curious. Started around the time I did the integration of Net2FTP into ISPConfig3.
     
  4. BorderAmigos

    BorderAmigos New Member

    Ahhh, I think I got it figured out. Debian did a big update of around 50 packages last week at about the same time the log files changed. Some of the packages apparently changed the log levels so many of my logs got much bigger. Going back through them now to reset the levels.
     

Share This Page