Differences between revisions 7 and 8
Revision 7 as of 2008-01-02 18:33:05
Size: 1582
Editor: UlfLamping
Comment:
Revision 8 as of 2008-04-12 17:51:31
Size: 1588
Editor: localhost
Comment: converted to 1.6 markup
Deletions are marked like this. Additions are marked like this.
Line 16: Line 16:
 * ["TCP"]: Typically, FTP uses ["TCP"] as its transport protocol. The well known TCP port for FTP control is 21 and for FTP data is 20. However, the FTP data port is negotiated through the control port and will typically vary in an "unpredictable" manner.  * [[TCP]]: Typically, FTP uses [[TCP]] as its transport protocol. The well known TCP port for FTP control is 21 and for FTP data is 20. However, the FTP data port is negotiated through the control port and will typically vary in an "unpredictable" manner.
Line 35: Line 35:
A complete list of FTP display filter fields can be found in the [http://www.wireshark.org/docs/dfref/f/ftp.html display filter reference] A complete list of FTP display filter fields can be found in the [[http://www.wireshark.org/docs/dfref/f/ftp.html|display filter reference]]
Line 42: Line 42:
You cannot directly filter FTP protocols while capturing. However, if you know the ["TCP"] port used (see above), you can filter on that one. You cannot directly filter FTP protocols while capturing. However, if you know the [[TCP]] port used (see above), you can filter on that one.
Line 46: Line 46:
 * [http://www.ietf.org/rfc/rfc959.txt RFC 959] ''FILE TRANSFER PROTOCOL (FTP)''
 * [http://en.wikipedia.org/wiki/Ftp FTP] at Wikipedia.org
 * [[http://www.ietf.org/rfc/rfc959.txt|RFC 959]] ''FILE TRANSFER PROTOCOL (FTP)''
 * [[http://en.wikipedia.org/wiki/Ftp|FTP]] at Wikipedia.org

File Transfer Protocol (FTP)

As the name implies, FTP is used to transfer files.

Security

FTP uses plain text passwords, so take care.

History

XXX - add a brief description of FTP history

Protocol dependencies

  • TCP: Typically, FTP uses TCP as its transport protocol. The well known TCP port for FTP control is 21 and for FTP data is 20. However, the FTP data port is negotiated through the control port and will typically vary in an "unpredictable" manner.

Example traffic

XXX - Add example traffic here (as plain text or Wireshark screenshot).

Wireshark

The FTP dissector is fully functional.

Preference Settings

There are no FTP specific preference settings.

Example capture file

XXX - Add a simple example capture file to the SampleCaptures page and link from here. Keep it short, it's also a good idea to gzip it to make it even smaller, as Wireshark can open gzipped files automatically.

Display Filter

A complete list of FTP display filter fields can be found in the display filter reference

  • Show only the FTP based traffic:

     ftp 

Capture Filter

You cannot directly filter FTP protocols while capturing. However, if you know the TCP port used (see above), you can filter on that one.

  • RFC 959 FILE TRANSFER PROTOCOL (FTP)

  • FTP at Wikipedia.org

Discussion

FTP (last edited 2008-04-12 17:51:31 by localhost)