How to Check the Commands Executed by FTP
To see what commands are being executed by FTP users, use the log
commands logging capability in ftpaccess.
Add the following directive to the ftpaccess file to log individual commands by users who are specified in typelist.
Check messages that are written to the location
specified in the /etc/syslog.conf.