TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
Chris,
These two numbers especify the two bytes that form the tcp port used for
the ftp data connection. In your case 16 * 256 + 77 = 4173.
See the description of the ftp PORT command in rfc 959:
http://www.ietf.org/rfc/rfc0959.txt
-- Oliver
On Mon, 18 Sep 2000, Chris H Mahn wrote:
>
> If you go to Inspect Event for an FTP Bounce, it will give you the
> command sent by the source IP address. Like this
>
> TARGETIP x.x.x.x
> TARGETPORT xxxx
> CMD PORT X , X , X , X , N , N
>
> The first part of the CMD is always the TargetIP, can anyone tell me
> what the last two numbers in the CMD are for. For instance if it says
> X , X , X , X , 16, 77, what does the 16 and 77 do?
>
