NSA310S Log massage "built-in-service/info/Userlogout FTP"?

Björn Büscher

Hi Guys

Sorry for my bad English.

I have the entry in my NSA310S protocol:

built-in-service / info / Userlogout FTP

What exactly does this entry mean?

When a user dials in via FTP, the entry is

built-in-service / info / User "name" ("ip") login FTP success

or

User "name" logout FTP

but what does the entry Userlogout FTP tell me?

Thank you for your answers.

Björn Büscher

same picture, better resolution

Mijzelf

I have seen that question before. When I remember well it's a failed login. Is the server accessible from internet?

Björn Büscher

yes he can be reached via the internet.

However, in the event of a wrong login attempt, the log message is

User "xxx" ("ip") login FTP failed.

or

Failed unknown login attempt (incorrect password or inexistent username)

Mijzelf

And what if you only connect using telnet, and disconnect directly, like a portscan would do? It's not a failed login, just rattling at the gate.