Parsing FTP Logs
FTP stands for File Transfer Protocol, and an FTP server sends and receives files over a TCP/IP network using FTP. These servers, just like their web server counterparts, keep detailed logs. In fact, if you understand web logs, you will be pleased to know that the Windows FTP server uses the same default log format, which is W3C. When examining FTP logs, you can primarily use the fields shown previously in Table 11-1, but be aware that FTP logs do not record the following fields:
Although both FTP and HTTP use the same default logging format, the sc-status codes differ for the two protocols. Table 11-4 lists the status codes for FTP.