Thread: Log/Monitor User Traffic Over SFTP

hello,
i'm using ubuntu server 12.04 set server via openssh use share pics friends via sftp. have them chrooted common directory , in /var/log/auth.log can see opens connection server, great. can monitor current network traffic iftop.

however, cannot view file specific user downloading. log files being downloaded each user, can see how different users using server. possible obtain data , in file looking this:

user...connection........file......start....end... ...avg.speed
alex.......sftp.........pic5.jpg....02:03....02:05 ......15mbit/s
john.......sftp.........folder1.....04:00....04:55 ......1mbit/s

feedback welcome since i'm going mad trying achieve rsyslog right now.

try setting log level info. filenames logged auth.log

code:

subsystem       sftp    /usr/libexec/openssh/sftp-server -l info

or

code:

subsystem       sftp    internal-sftp -l info

be aware severely violates user privacy.

alternately, can use -f change log facility auth else , capture logs in different file.

Forum The Ubuntu Forum Community Ubuntu Official Flavours Support Networking & Wireless [SOLVED] Log/Monitor User Traffic Over SFTP

Ubuntu