TFTP server logs (need ideas)

[boynas]

Well, here's a question:

I have used the tftp (atftpd) server that comes with trixbox, and it comes configured so it drops its logs into /var/log/atftpd.log (or something like that).

Now, that I have converted to PIAF, I can't seem to find that log file. Obviously, I've found that we are using a different daemon (tftp not advanced, I guess!) and it has different server_args in the /etc/xinetd.d/tftp conf...

I really like to be able to trace the behaiviour of the tftp traffic, and I think that installing tshark (wireshark) to trace port 69 is overkilling.

Any ideas? Ohhh, BTW, the xinet.d log doesn't give any info other than: "tftp is being used" but nothing about commands or files being transmitted.

Thanks!

[bluetrepidation]

I ran into the same issue when trying to fix a booting issue on Cisco phones. I'd also like to know where the log saves or if you need to turn on more detailed logging.

[tel0p]

same issue here. the 'new version' of tftpd in place doesn't seem to log (or have logging enabled.)

[euser4life]

When you are troubleshooting you can use "tcpdump" to get the output from your tftp server for what information is requested and handed out. Do the following from the console or SSH session:

tcpdump port 69 -v

Then when you have the information you need just hit "ctrl c" to cancel out.

[TomS]

This is from my notes about troubleshooting:
To log to: /var/log/messages
cd /etc/xinetd.d
edit file 'tftp' (see next line)
add '-vv' to the end of the line with 'server_args = -s /tftpboot -vv' (no single quotes).
save the file and restart tftp: /etc/init.d/xinetd restart
Then:
cd /var/log
tail -0f messages - to see phone activity real time
If you place a number other than zero in the command, you will see that many lines of the file before the real time viewing occurs.
control-c to stop the tail command
Remove the -vv and restart to STOP the logging overhead
Hope this helps!
TomS

[boynas]

Thank you... I couldn't find that -vv arg for that TFTP server.

Which by the way tel0p, is a different tftp server than ATFTPD... Right?