Hmm, it's a bit hard to see the sequence of commands in the packets - did you
use "-s" to increase the part of the packets which gets snapped? ("-s 0"
should capture the entire packet).
OK, I recreated the files. First, I added -s 0 to tcpdump. Second, I ran ftp with -u and -n. It appears the authentication information is disabled by -u, and automatic login is disabled by -n. So it should now be pretty much bare bones. I changed the transcript accordingly.
Reminder: the URL is http://192.115.21.202/pasv/
I also noticed that ftp has a -t option which is supposed to enable packet tracing. I wouldn't know what this means, but I tried another tcpdump with this option turned on. It doesn't seem to make much of a difference, but you judge.
I saw no difference in the output of ftp -v relative to normal output.
Herouth -- EMAIL: [EMAIL PROTECTED] HOME PAGE: http://herouth.port5.com/
================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
