How to see what is uploaded/downloaded from my samba/ssh ser

Message

rado3105 · Post by **rado3105** » Wed Oct 20, 2010 8:48 am

Is possible to see in some log file or...any program downloaded and uplaoded data from various users to my server, using ssh, samba?
For downloaded/uploaded data I have vnstat, but I would like to also see what is uploaded(name of file) and what is downloaded, also which ip is downloading what. Thanks. I dont mean smbstatus, but something I can see later.

malern · Post by **malern** » Wed Oct 20, 2010 12:11 pm

ssh doesn't transfer files itself, it's the protocols on top of ssh that do the transferring e.g scp, sftp, rsync, "cat > file", etc. There's so many different ways that it could be done that it'd be impossible to log them all.

For samba you should be able to find the information in /var/log/samba. Someone else might know some good tools for parsing that information into a more useful format.

rado3105 · Post by **rado3105** » Thu Oct 21, 2010 3:57 pm

It is sftp. In /var/log/samba there is nothing related to user. Is there any tool to monitor and log this?

your_WooDness · Post by **your_WooDness** » Thu Oct 21, 2010 4:11 pm

Hi,

I think netwatch can split up the traffic into the different protocols, but I am not sure. Maybe you should have a look at it...

WooD