Thanks for the info. That helps explain where /var/log/xferlog is coming from. I had no idea that was from syslog, but it does make sense since pure-ftpd does support syslog.
Cool well at least I understand where that file is coming from now and no kidding it doesn't work with webalizer..etc. I guess if I am to pull the results from that log I'll have to write a custom parser of some kind.
Thanks for the clarification.