Date: 2014dec30 Product: vsftpd OS: Linux Q. What is the format of the vsftpd xferlog file (transfer log)? A. It its based on the wuftpd log format. A typical line might look this this:

Mon Dec 29 15:54:06 2014 1 ::ffff:127.0.0.1 20907184 /myfile.zip b _ i g junk ftp 0 * c

The fields are delimited by spaces. They are:

Day-of-week Month Day-of-month Time Year Number (Sorry don't know what this is) IP-address Bytes Filename Mode b = Binary, a = ASCII Operation _ = no special operation Direction i = input (eg put), o = output (eg get) Access mode a = anon, g = guest, r = regular Username Service Always ftp Auth method Always 0 Star Always * "ftp 0 *" is just hardcoded in vsftpd - left over from wuftpd Completed c = completed, i = incomplete