File Transfer Protocol (FTP)
As the name implies, FTP is used to transfer files.
FTP uses plain text passwords, so take care.
XXX - add a brief description of FTP history
TCP: Typically, FTP uses TCP as its transport protocol. The well known TCP port for FTP control is 21 and for FTP data is 20. However, the FTP data port is negotiated through the control port and will typically vary in an "unpredictable" manner.
XXX - Add example traffic here (as plain text or Wireshark screenshot).
The FTP dissector is fully functional.
There are no FTP specific preference settings.
Example capture file
XXX - Add a simple example capture file to the SampleCaptures page and link from here. Keep it short, it's also a good idea to gzip it to make it even smaller, as Wireshark can open gzipped files automatically.
A complete list of FTP display filter fields can be found in the display filter reference
Show only the FTP based traffic:
You cannot directly filter FTP protocols while capturing. However, if you know the TCP port used (see above), you can filter on that one.