ftplogcheck.pl

ftplogcheck.pl

#!/usr/bin/perl
use warnings;
use strict;
use Getopt::Long;
use Data::Dumper;

my $file = '';
my $csv = 0;
my $all = 0;
GetOptions(
        'file=s' => \$file,
        'csv' => \$csv,
        'all' => \$all,
);

if (!$file) {
        print "Usage: ftplogcheck.pl --file=/var/log/messages --csv --all\n";
        exit 1;
}

my %info;

open my $f, '<', '/etc/ips';
my @ips = <$f>;
close($f);

open $f, '<', $file;
while (<$f>) {
        chomp;
        next unless $_ =~ /pure-ftpd/;
        next unless $_ =~ /uploaded/;
        $_ =~ s/[\(\)]//g;
        my @parts = split(/\s+/);

        my $upload = $parts[7];

        my @loginparts = split('@', $parts[5]);
        my $ip = pop(@loginparts);
        my $login = join('@', @loginparts);

        next if $ip eq '127.0.0.1';
        next if grep /$ip:/, @ips;


        next if $upload eq 'Deleted';
        next if $upload eq 'Timeout';
        next if $upload eq 'File';
        next if $upload eq 'Logout.';
        next if $upload eq "Can't";
        my $home = (split('/', $upload))[2] ? (split('/', $upload))[2] : 0;

        $info{$ip}{homes}{$home}{$upload}++;
        $info{$ip}{files}{$login}++;

}

foreach my $ip (keys %info) {
        if ($all || scalar(keys %{$info{$ip}{homes}}) > 1) {
                if (!$csv) {
                        print "$ip\n";
                        print '=' x 80;
                        print "\n";
                }
                for my $home (keys %{$info{$ip}{homes}}) {
                        if (!$csv) {
                                print "$home\n";
                                print '-' x 80;
                                print "\n";
                        }
                        for my $file (keys %{$info{$ip}{homes}{$home}}) {
                                if (!$csv) {
                                        print "$file\n";
                                } else {
                                        print "$ip,$home,$file\n";
                                }
                        }
                        print "\n" if (!$csv);
                }
                print "\n" if (!$csv);
        }
}