Monitoring FTP usage is operating system dependent. For example, with Solaris the 'last' command can be filtered for ftp sessions. While 'netstat -a' can also be filtered if you know the listening address. If you are using NT you have my pity ;-) - but no help from me.