well, to verify if there is an active ftp connection, use netstat:
netstat
look for IPs/hostname that is connected to port 21 of your system (port 21 is the default ftp port). or use ftpwho:
ftpwho
mostly, the any file access will be registered in /var/log/vsftpd.log or in /var/log/xferlog. these logs are present in redhat systems. i dunno if they are placed in another place with other distros.
logon attempts/failure will be registered in /var/log/secure.
hth
|