We have a linux box that is configured with vsftp for our ftp sessions. Unfortunately, for the last few days, we've found that files served by vsftpd have been lost (deleted).

I would like to know:

  1. Who deleted them
  2. When deletion occurred
  3. How the user logged in
  • Have you checked /var/log/vsftpd.log? – py4on Jul 22 '15 at 12:10
  • i have checked vsftpd.log & audit.log but couldn't understand it. as i said i am new. – Zahidul Islam Jul 23 '15 at 10:49

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.