On 10/02/06, Trinh Hoai Tri <[EMAIL PROTECTED]> wrote:
> To^i du`ng ethereal kie^?m tra thi` tha^'y VLTK du`ng passive FTP
> dde^? update, Lo^~i pha't sinh ta.i package PORT cu?a Client khi du`ng
> qua tu+o+`ng lu+?a. So sa'nh:
>
> -- Khi kho^ng co' tu+o+`ng lu+?a:
>
> Src: client, Dest: Upd server
> port: 4712 to port: 21
> Request command: PORT
> Request arg: 192,168,200,64,18,105
> Active IP address: 192.168.200.64
> Active port 4713
>
> Src: Upd Server, Dest: client
> port 21 to port 4712
> Response code: Command okay (200)
> Response arg: PORT command successful. Consider using PASV.
>
> -- Khi co' tu+o+`ng lu+?a
>
> Src: client, Dest: Upd server
> port: 2223 to port: 21
> Request command: PORT
> Request arg: 192,168,100,126,8,176
> Active IP address: 192.168.100.126
> Active port 2224
>
> Src: Upd Server, Dest: client
> port 21 to port 2223
> Response code: Syntax error, command unrecognized (500)
> Response arg: Illegal PORT command
>
> Xin ca'c ba'c va`i ve'.
>
> DDa ta.
>
> Tri
>
To^i ddoa'n ra ru`i, chu+o+ng tri`nh update na`y no' kho^ng xa`i
passive FTP !! Client du`ng PORT command dde^? tho^ng ba'o cho server
bie^'t data port tre^n client dde^? no^'i va`o, sau ddo' server send
data qua port na`y. Ca'i netfilter cu?a mi`nh cha('c ba('p la` reject
ca'i connection na`y ne^n mo+i sinh chuye^.n.
To^i ke`m cai'i log cu?a ethereal, ba'c na`o ra`nh xem thu+? ddoa'n
nhu+ va^.y co' ddu'ng kho^ng. Xin ca'o lo^~i la` ca'i file na`y du`ng
format DOS ca'c ba'c dos2unix du`m ca'i..
Ca?m o+n tru+o+'c.
Tri
No. Time Source Destination Protocol Info
1 0.000000 192.168.200.64 222.255.120.153 TCP 3035 >
http [SYN] Seq=0 Ack=0 Win=65535 Len=0 MSS=1460
Frame 1 (62 bytes on wire, 62 bytes captured)
Ethernet II, Src: DellEsgP_98:9b:d1 (00:0b:db:98:9b:d1), Dst: Conexant_00:04:17
(00:30:cd:00:04:17)
Internet Protocol, Src: 192.168.200.64 (192.168.200.64), Dst: 222.255.120.153
(222.255.120.153)
Transmission Control Protocol, Src Port: 3035 (3035), Dst Port: http (80), Seq:
0, Ack: 0, Len: 0
0000 00 30 cd 00 04 17 00 0b db 98 9b d1 08 00 45 00 .0............E.
0010 00 30 19 51 40 00 80 06 00 f5 c0 a8 c8 40 de ff [EMAIL PROTECTED]@..
0020 78 99 0b db 00 50 79 4a 4f 4c 00 00 00 00 70 02 x....PyJOL....p.
0030 ff ff cd db 00 00 02 04 05 b4 01 01 04 02 ..............
No. Time Source Destination Protocol Info
2 0.008971 222.255.120.153 192.168.200.64 TCP http >
3035 [SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1432
Frame 2 (62 bytes on wire, 62 bytes captured)
Ethernet II, Src: Conexant_00:04:17 (00:30:cd:00:04:17), Dst: DellEsgP_98:9b:d1
(00:0b:db:98:9b:d1)
Internet Protocol, Src: 222.255.120.153 (222.255.120.153), Dst: 192.168.200.64
(192.168.200.64)
Transmission Control Protocol, Src Port: http (80), Dst Port: 3035 (3035), Seq:
0, Ack: 1, Len: 0
0000 00 0b db 98 9b d1 00 30 cd 00 04 17 08 00 45 00 .......0......E.
0010 00 30 00 00 40 00 3b 06 5f 46 de ff 78 99 c0 a8 [EMAIL
PROTECTED];._F..x...
0020 c8 40 00 50 0b db 04 5e b3 59 79 4a 4f 4d 70 12 [EMAIL PROTECTED]
0030 16 d0 ff 5e 00 00 02 04 05 98 01 01 04 02 ...^..........
No. Time Source Destination Protocol Info
3 0.008991 192.168.200.64 222.255.120.153 TCP 3035 >
http [ACK] Seq=1 Ack=1 Win=65535 [TCP CHECKSUM INCORRECT] Len=0
Frame 3 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: DellEsgP_98:9b:d1 (00:0b:db:98:9b:d1), Dst: Conexant_00:04:17
(00:30:cd:00:04:17)
Internet Protocol, Src: 192.168.200.64 (192.168.200.64), Dst: 222.255.120.153
(222.255.120.153)
Transmission Control Protocol, Src Port: 3035 (3035), Dst Port: http (80), Seq:
1, Ack: 1, Len: 0
0000 00 30 cd 00 04 17 00 0b db 98 9b d1 08 00 45 00 .0............E.
0010 00 28 19 52 40 00 80 06 00 fc c0 a8 c8 40 de ff .([EMAIL PROTECTED]@..
0020 78 99 0b db 00 50 79 4a 4f 4d 04 5e b3 5a 50 10 x....PyJOM.^.ZP.
0030 ff ff e0 9c 00 00 ......
No. Time Source Destination Protocol Info
4 0.009103 192.168.200.64 222.255.120.153 HTTP GET
/up/bulletin.ini HTTP/1.1
Frame 4 (224 bytes on wire, 224 bytes captured)
Ethernet II, Src: DellEsgP_98:9b:d1 (00:0b:db:98:9b:d1), Dst: Conexant_00:04:17
(00:30:cd:00:04:17)
Internet Protocol, Src: 192.168.200.64 (192.168.200.64), Dst: 222.255.120.153
(222.255.120.153)
Transmission Control Protocol, Src Port: 3035 (3035), Dst Port: http (80), Seq:
1, Ack: 1, Len: 170
Hypertext Transfer Protocol
0000 00 30 cd 00 04 17 00 0b db 98 9b d1 08 00 45 00 .0............E.
0010 00 d2 19 53 40 00 80 06 00 51 c0 a8 c8 40 de ff [EMAIL PROTECTED]@..
0020 78 99 0b db 00 50 79 4a 4f 4d 04 5e b3 5a 50 18 x....PyJOM.^.ZP.
0030 ff ff e1 46 00 00 47 45 54 20 2f 75 70 2f 62 75 ...F..GET /up/bu
0040 6c 6c 65 74 69 6e 2e 69 6e 69 20 48 54 54 50 2f lletin.ini HTTP/
0050 31 2e 31 0d 0a 49 66 2d 4d 6f 64 69 66 69 65 64 1.1..If-Modified
0060 2d 53 69 6e 63 65 3a 20 4d 6f 6e 2c 20 32 32 20 -Since: Mon, 22
0070 41 75 67 20 32 30 30 35 20 30 31 3a 35 30 3a 34 Aug 2005 01:50:4
0080 30 20 47 4d 54 0d 0a 49 66 2d 4e 6f 6e 65 2d 4d 0 GMT..If-None-M
0090 61 74 63 68 3a 20 22 33 64 30 30 30 63 2d 31 64 atch: "3d000c-1d
00a0 33 2d 34 33 30 39 32 66 37 30 22 0d 0a 55 73 65 3-43092f70"..Use
00b0 72 2d 41 67 65 6e 74 3a 20 4a 78 6f 6e 6c 69 6e r-Agent: Jxonlin
00c0 65 5f 59 0d 0a 48 6f 73 74 3a 20 62 65 74 61 2e e_Y..Host: beta.
00d0 76 6f 6c 61 6d 2e 63 6f 6d 2e 76 6e 0d 0a 0d 0a volam.com.vn....
No. Time Source Destination Protocol Info
5 0.023039 222.255.120.153 192.168.200.64 TCP http >
3035 [ACK] Seq=1 Ack=171 Win=5840 Len=0
Frame 5 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Conexant_00:04:17 (00:30:cd:00:04:17), Dst: DellEsgP_98:9b:d1
(00:0b:db:98:9b:d1)
Internet Protocol, Src: 222.255.120.153 (222.255.120.153), Dst: 192.168.200.64
(192.168.200.64)
Transmission Control Protocol, Src Port: http (80), Dst Port: 3035 (3035), Seq:
1, Ack: 171, Len: 0
0000 00 0b db 98 9b d1 00 30 cd 00 04 17 08 00 45 00 .......0......E.
0010 00 28 69 a1 40 00 3b 06 f5 ac de ff 78 99 c0 a8 .([EMAIL
PROTECTED];.....x...
0020 c8 40 00 50 0b db 04 5e b3 5a 79 4a 4f f7 50 10 [EMAIL PROTECTED]
0030 16 d0 2b 5d 00 00 00 00 00 00 00 00 ..+]........
No. Time Source Destination Protocol Info
6 0.025242 222.255.120.153 192.168.200.64 HTTP
HTTP/1.1 304 Not Modified
Frame 6 (195 bytes on wire, 195 bytes captured)
Ethernet II, Src: Conexant_00:04:17 (00:30:cd:00:04:17), Dst: DellEsgP_98:9b:d1
(00:0b:db:98:9b:d1)
Internet Protocol, Src: 222.255.120.153 (222.255.120.153), Dst: 192.168.200.64
(192.168.200.64)
Transmission Control Protocol, Src Port: http (80), Dst Port: 3035 (3035), Seq:
1, Ack: 171, Len: 141
Hypertext Transfer Protocol
0000 00 0b db 98 9b d1 00 30 cd 00 04 17 08 00 45 00 .......0......E.
0010 00 b5 69 a3 40 00 3b 06 f5 1d de ff 78 99 c0 a8 [EMAIL
PROTECTED];.....x...
0020 c8 40 00 50 0b db 04 5e b3 5a 79 4a 4f f7 50 18 [EMAIL PROTECTED]
0030 16 d0 72 aa 00 00 48 54 54 50 2f 31 2e 31 20 33 ..r...HTTP/1.1 3
0040 30 34 20 4e 6f 74 20 4d 6f 64 69 66 69 65 64 0d 04 Not Modified.
0050 0a 44 61 74 65 3a 20 46 72 69 2c 20 31 30 20 46 .Date: Fri, 10 F
0060 65 62 20 32 30 30 36 20 30 39 3a 30 32 3a 34 33 eb 2006 09:02:43
0070 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 4d 69 GMT..Server: Mi
0080 63 72 6f 73 6f 66 74 2d 49 49 53 2f 35 2e 30 0d crosoft-IIS/5.0.
0090 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f .Connection: clo
00a0 73 65 0d 0a 45 54 61 67 3a 20 22 33 64 30 30 30 se..ETag: "3d000
00b0 63 2d 31 64 33 2d 34 33 30 39 32 66 37 30 22 0d c-1d3-43092f70".
00c0 0a 0d 0a ...
No. Time Source Destination Protocol Info
7 0.025345 192.168.200.64 222.255.120.153 TCP 3035 >
http [FIN, ACK] Seq=171 Ack=142 Win=65394 [TCP CHECKSUM INCORRECT] Len=0
Frame 7 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: DellEsgP_98:9b:d1 (00:0b:db:98:9b:d1), Dst: Conexant_00:04:17
(00:30:cd:00:04:17)
Internet Protocol, Src: 192.168.200.64 (192.168.200.64), Dst: 222.255.120.153
(222.255.120.153)
Transmission Control Protocol, Src Port: 3035 (3035), Dst Port: http (80), Seq:
171, Ack: 142, Len: 0
0000 00 30 cd 00 04 17 00 0b db 98 9b d1 08 00 45 00 .0............E.
0010 00 28 19 54 40 00 80 06 00 fa c0 a8 c8 40 de ff .([EMAIL PROTECTED]@..
0020 78 99 0b db 00 50 79 4a 4f f7 04 5e b3 e7 50 11 x....PyJO..^..P.
0030 ff 72 e0 9c 00 00 .r....
No. Time Source Destination Protocol Info
8 0.025681 222.255.120.153 192.168.200.64 TCP http >
3035 [FIN, ACK] Seq=142 Ack=171 Win=5840 Len=0
Frame 8 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Conexant_00:04:17 (00:30:cd:00:04:17), Dst: DellEsgP_98:9b:d1
(00:0b:db:98:9b:d1)
Internet Protocol, Src: 222.255.120.153 (222.255.120.153), Dst: 192.168.200.64
(192.168.200.64)
Transmission Control Protocol, Src Port: http (80), Dst Port: 3035 (3035), Seq:
142, Ack: 171, Len: 0
0000 00 0b db 98 9b d1 00 30 cd 00 04 17 08 00 45 00 .......0......E.
0010 00 28 69 a5 40 00 3b 06 f5 a8 de ff 78 99 c0 a8 .([EMAIL
PROTECTED];.....x...
0020 c8 40 00 50 0b db 04 5e b3 e7 79 4a 4f f7 50 11 [EMAIL PROTECTED]
0030 16 d0 2a cf 00 00 00 00 00 00 00 00 ..*.........
No. Time Source Destination Protocol Info
9 0.025703 192.168.200.64 222.255.120.153 TCP 3035 >
http [ACK] Seq=172 Ack=143 Win=65394 [TCP CHECKSUM INCORRECT] Len=0
Frame 9 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: DellEsgP_98:9b:d1 (00:0b:db:98:9b:d1), Dst: Conexant_00:04:17
(00:30:cd:00:04:17)
Internet Protocol, Src: 192.168.200.64 (192.168.200.64), Dst: 222.255.120.153
(222.255.120.153)
Transmission Control Protocol, Src Port: 3035 (3035), Dst Port: http (80), Seq:
172, Ack: 143, Len: 0
0000 00 30 cd 00 04 17 00 0b db 98 9b d1 08 00 45 00 .0............E.
0010 00 28 19 55 40 00 80 06 00 f9 c0 a8 c8 40 de ff .([EMAIL PROTECTED]@..
0020 78 99 0b db 00 50 79 4a 4f f8 04 5e b3 e8 50 10 x....PyJO..^..P.
0030 ff 72 e0 9c 00 00 .r....
No. Time Source Destination Protocol Info
10 0.035297 222.255.120.153 192.168.200.64 TCP http >
3035 [ACK] Seq=143 Ack=172 Win=5840 Len=0
Frame 10 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Conexant_00:04:17 (00:30:cd:00:04:17), Dst: DellEsgP_98:9b:d1
(00:0b:db:98:9b:d1)
Internet Protocol, Src: 222.255.120.153 (222.255.120.153), Dst: 192.168.200.64
(192.168.200.64)
Transmission Control Protocol, Src Port: http (80), Dst Port: 3035 (3035), Seq:
143, Ack: 172, Len: 0
0000 00 0b db 98 9b d1 00 30 cd 00 04 17 08 00 45 00 .......0......E.
0010 00 28 69 a7 40 00 3b 06 f5 a6 de ff 78 99 c0 a8 .([EMAIL
PROTECTED];.....x...
0020 c8 40 00 50 0b db 04 5e b3 e8 79 4a 4f f8 50 10 [EMAIL PROTECTED]
0030 16 d0 2a ce 00 00 00 00 00 00 00 00 ..*.........
No. Time Source Destination Protocol Info
11 0.051754 192.168.200.64 192.168.200.125 DNS
Standard query A up4.mirror.volam.com.vn
Frame 11 (83 bytes on wire, 83 bytes captured)
Ethernet II, Src: DellEsgP_98:9b:d1 (00:0b:db:98:9b:d1), Dst: Conexant_00:04:17
(00:30:cd:00:04:17)
Internet Protocol, Src: 192.168.200.64 (192.168.200.64), Dst: 192.168.200.125
(192.168.200.125)
User Datagram Protocol, Src Port: 2754 (2754), Dst Port: domain (53)
Domain Name System (query)
0000 00 30 cd 00 04 17 00 0b db 98 9b d1 08 00 45 00 .0............E.
0010 00 45 19 56 00 00 80 11 0f 43 c0 a8 c8 40 c0 a8 [EMAIL PROTECTED]
0020 c8 7d 0a c2 00 35 00 31 0b 46 75 8c 01 00 00 01 .}...5.1.Fu.....
0030 00 00 00 00 00 00 03 75 70 34 06 6d 69 72 72 6f .......up4.mirro
0040 72 05 76 6f 6c 61 6d 03 63 6f 6d 02 76 6e 00 00 r.volam.com.vn..
0050 01 00 01 ...
No. Time Source Destination Protocol Info
12 0.063278 192.168.200.125 192.168.200.64 DNS
Standard query response A 222.255.120.153
Frame 12 (209 bytes on wire, 209 bytes captured)
Ethernet II, Src: Conexant_00:04:17 (00:30:cd:00:04:17), Dst: DellEsgP_98:9b:d1
(00:0b:db:98:9b:d1)
Internet Protocol, Src: 192.168.200.125 (192.168.200.125), Dst: 192.168.200.64
(192.168.200.64)
User Datagram Protocol, Src Port: domain (53), Dst Port: 2754 (2754)
Domain Name System (response)
0000 00 0b db 98 9b d1 00 30 cd 00 04 17 08 00 45 00 .......0......E.
0010 00 c3 04 c2 00 00 40 11 63 59 c0 a8 c8 7d c0 a8 [EMAIL PROTECTED]
0020 c8 40 00 35 0a c2 00 af a0 65 75 8c 81 80 00 01 [EMAIL PROTECTED]
0030 00 01 00 03 00 03 03 75 70 34 06 6d 69 72 72 6f .......up4.mirro
0040 72 05 76 6f 6c 61 6d 03 63 6f 6d 02 76 6e 00 00 r.volam.com.vn..
0050 01 00 01 c0 0c 00 01 00 01 00 00 3b c5 00 04 de ...........;....
0060 ff 78 99 c0 17 00 02 00 01 00 00 3b 99 00 0e 03 .x.........;....
0070 6e 73 33 07 73 6f 6e 74 68 75 79 c0 1d c0 17 00 ns3.sonthuy.....
0080 02 00 01 00 00 3b 99 00 06 03 6e 73 31 c0 49 c0 .....;....ns1.I.
0090 17 00 02 00 01 00 00 3b 99 00 06 03 6e 73 32 c0 .......;....ns2.
00a0 49 c0 5f 00 01 00 01 00 01 0b 45 00 04 de ff 78 I._.......E....x
00b0 82 c0 71 00 01 00 01 00 00 fc 0b 00 04 de ff 27 ..q............'
00c0 02 c0 45 00 01 00 01 00 00 fc 0b 00 04 cb a2 a3 ..E.............
00d0 3d =
No. Time Source Destination Protocol Info
13 0.067210 192.168.200.64 222.255.120.153 TCP 3036 >
ftp [SYN] Seq=0 Ack=0 Win=65535 Len=0 MSS=1460
Frame 13 (62 bytes on wire, 62 bytes captured)
Ethernet II, Src: DellEsgP_98:9b:d1 (00:0b:db:98:9b:d1), Dst: Conexant_00:04:17
(00:30:cd:00:04:17)
Internet Protocol, Src: 192.168.200.64 (192.168.200.64), Dst: 222.255.120.153
(222.255.120.153)
Transmission Control Protocol, Src Port: 3036 (3036), Dst Port: ftp (21), Seq:
0, Ack: 0, Len: 0
0000 00 30 cd 00 04 17 00 0b db 98 9b d1 08 00 45 00 .0............E.
0010 00 30 19 57 40 00 80 06 00 ef c0 a8 c8 40 de ff [EMAIL PROTECTED]@..
0020 78 99 0b dc 00 15 8a 80 6a c4 00 00 00 00 70 02 x.......j.....p.
0030 ff ff a1 67 00 00 02 04 05 b4 01 01 04 02 ...g..........
No. Time Source Destination Protocol Info
14 0.076988 222.255.120.153 192.168.200.64 TCP ftp >
3036 [SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1432
Frame 14 (62 bytes on wire, 62 bytes captured)
Ethernet II, Src: Conexant_00:04:17 (00:30:cd:00:04:17), Dst: DellEsgP_98:9b:d1
(00:0b:db:98:9b:d1)
Internet Protocol, Src: 222.255.120.153 (222.255.120.153), Dst: 192.168.200.64
(192.168.200.64)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: 3036 (3036), Seq:
0, Ack: 1, Len: 0
0000 00 0b db 98 9b d1 00 30 cd 00 04 17 08 00 45 00 .......0......E.
0010 00 30 00 00 40 00 3b 06 5f 46 de ff 78 99 c0 a8 [EMAIL
PROTECTED];._F..x...
0020 c8 40 00 15 0b dc 04 d4 cf c1 8a 80 6a c5 70 12 [EMAIL PROTECTED]
0030 16 d0 b6 0c 00 00 02 04 05 98 01 01 04 02 ..............
No. Time Source Destination Protocol Info
15 0.077021 192.168.200.64 222.255.120.153 TCP 3036 >
ftp [ACK] Seq=1 Ack=1 Win=65535 [TCP CHECKSUM INCORRECT] Len=0
Frame 15 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: DellEsgP_98:9b:d1 (00:0b:db:98:9b:d1), Dst: Conexant_00:04:17
(00:30:cd:00:04:17)
Internet Protocol, Src: 192.168.200.64 (192.168.200.64), Dst: 222.255.120.153
(222.255.120.153)
Transmission Control Protocol, Src Port: 3036 (3036), Dst Port: ftp (21), Seq:
1, Ack: 1, Len: 0
0000 00 30 cd 00 04 17 00 0b db 98 9b d1 08 00 45 00 .0............E.
0010 00 28 19 58 40 00 80 06 00 f6 c0 a8 c8 40 de ff .([EMAIL PROTECTED]@..
0020 78 99 0b dc 00 15 8a 80 6a c5 04 d4 cf c2 50 10 x.......j.....P.
0030 ff ff e0 9c 00 00 ......
No. Time Source Destination Protocol Info
16 0.088991 222.255.120.153 192.168.200.64 FTP
Response: 220 Welcome to Vinagame FTP service.
Frame 16 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Conexant_00:04:17 (00:30:cd:00:04:17), Dst: DellEsgP_98:9b:d1
(00:0b:db:98:9b:d1)
Internet Protocol, Src: 222.255.120.153 (222.255.120.153), Dst: 192.168.200.64
(192.168.200.64)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: 3036 (3036), Seq:
1, Ack: 1, Len: 38
File Transfer Protocol (FTP)
220 Welcome to Vinagame FTP service.\r\n
Response code: Service ready for new user (220)
Response arg: Welcome to Vinagame FTP service.
0000 00 0b db 98 9b d1 00 30 cd 00 04 17 08 00 45 00 .......0......E.
0010 00 4e 14 fc 40 00 3b 06 4a 2c de ff 78 99 c0 a8 [EMAIL
PROTECTED];.J,..x...
0020 c8 40 00 15 0b dc 04 d4 cf c2 8a 80 6a c5 50 18 [EMAIL PROTECTED]
0030 16 d0 69 c8 00 00 32 32 30 20 57 65 6c 63 6f 6d ..i...220 Welcom
0040 65 20 74 6f 20 56 69 6e 61 67 61 6d 65 20 46 54 e to Vinagame FT
0050 50 20 73 65 72 76 69 63 65 2e 0d 0a P service...
No. Time Source Destination Protocol Info
17 0.089063 192.168.200.64 222.255.120.153 FTP
Request: USER anonymous
Frame 17 (70 bytes on wire, 70 bytes captured)
Ethernet II, Src: DellEsgP_98:9b:d1 (00:0b:db:98:9b:d1), Dst: Conexant_00:04:17
(00:30:cd:00:04:17)
Internet Protocol, Src: 192.168.200.64 (192.168.200.64), Dst: 222.255.120.153
(222.255.120.153)
Transmission Control Protocol, Src Port: 3036 (3036), Dst Port: ftp (21), Seq:
1, Ack: 39, Len: 16
File Transfer Protocol (FTP)
USER anonymous\r\n
Request command: USER
Request arg: anonymous
0000 00 30 cd 00 04 17 00 0b db 98 9b d1 08 00 45 00 .0............E.
0010 00 38 19 59 40 00 80 06 00 e5 c0 a8 c8 40 de ff [EMAIL PROTECTED]@..
0020 78 99 0b dc 00 15 8a 80 6a c5 04 d4 cf e8 50 18 x.......j.....P.
0030 ff d9 e0 ac 00 00 55 53 45 52 20 61 6e 6f 6e 79 ......USER anony
0040 6d 6f 75 73 0d 0a mous..
No. Time Source Destination Protocol Info
18 0.096993 222.255.120.153 192.168.200.64 TCP ftp >
3036 [ACK] Seq=39 Ack=17 Win=5840 Len=0
Frame 18 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Conexant_00:04:17 (00:30:cd:00:04:17), Dst: DellEsgP_98:9b:d1
(00:0b:db:98:9b:d1)
Internet Protocol, Src: 222.255.120.153 (222.255.120.153), Dst: 192.168.200.64
(192.168.200.64)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: 3036 (3036), Seq:
39, Ack: 17, Len: 0
0000 00 0b db 98 9b d1 00 30 cd 00 04 17 08 00 45 00 .......0......E.
0010 00 28 14 fe 40 00 3b 06 4a 50 de ff 78 99 c0 a8 .([EMAIL
PROTECTED];.JP..x...
0020 c8 40 00 15 0b dc 04 d4 cf e8 8a 80 6a d5 50 10 [EMAIL PROTECTED]
0030 16 d0 e2 7e 00 00 00 00 00 00 00 00 ...~........
No. Time Source Destination Protocol Info
19 0.099017 222.255.120.153 192.168.200.64 FTP
Response: 331 Please specify the password.
Frame 19 (88 bytes on wire, 88 bytes captured)
Ethernet II, Src: Conexant_00:04:17 (00:30:cd:00:04:17), Dst: DellEsgP_98:9b:d1
(00:0b:db:98:9b:d1)
Internet Protocol, Src: 222.255.120.153 (222.255.120.153), Dst: 192.168.200.64
(192.168.200.64)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: 3036 (3036), Seq:
39, Ack: 17, Len: 34
File Transfer Protocol (FTP)
331 Please specify the password.\r\n
Response code: User name okay, need password (331)
Response arg: Please specify the password.
0000 00 0b db 98 9b d1 00 30 cd 00 04 17 08 00 45 00 .......0......E.
0010 00 4a 15 00 40 00 3b 06 4a 2c de ff 78 99 c0 a8 [EMAIL
PROTECTED];.J,..x...
0020 c8 40 00 15 0b dc 04 d4 cf e8 8a 80 6a d5 50 18 [EMAIL PROTECTED]
0030 16 d0 9b 33 00 00 33 33 31 20 50 6c 65 61 73 65 ...3..331 Please
0040 20 73 70 65 63 69 66 79 20 74 68 65 20 70 61 73 specify the pas
0050 73 77 6f 72 64 2e 0d 0a sword...
No. Time Source Destination Protocol Info
20 0.099061 192.168.200.64 222.255.120.153 FTP
Request: PASS IEUser@
Frame 20 (68 bytes on wire, 68 bytes captured)
Ethernet II, Src: DellEsgP_98:9b:d1 (00:0b:db:98:9b:d1), Dst: Conexant_00:04:17
(00:30:cd:00:04:17)
Internet Protocol, Src: 192.168.200.64 (192.168.200.64), Dst: 222.255.120.153
(222.255.120.153)
Transmission Control Protocol, Src Port: 3036 (3036), Dst Port: ftp (21), Seq:
17, Ack: 73, Len: 14
File Transfer Protocol (FTP)
PASS [EMAIL PROTECTED]
Request command: PASS
Request arg: IEUser@
0000 00 30 cd 00 04 17 00 0b db 98 9b d1 08 00 45 00 .0............E.
0010 00 36 19 5a 40 00 80 06 00 e6 c0 a8 c8 40 de ff [EMAIL PROTECTED]@..
0020 78 99 0b dc 00 15 8a 80 6a d5 04 d4 d0 0a 50 18 x.......j.....P.
0030 ff b7 e0 aa 00 00 50 41 53 53 20 49 45 55 73 65 ......PASS IEUse
0040 72 40 0d 0a [EMAIL PROTECTED]
No. Time Source Destination Protocol Info
21 0.109032 222.255.120.153 192.168.200.64 FTP
Response: 230 Login successful.
Frame 21 (77 bytes on wire, 77 bytes captured)
Ethernet II, Src: Conexant_00:04:17 (00:30:cd:00:04:17), Dst: DellEsgP_98:9b:d1
(00:0b:db:98:9b:d1)
Internet Protocol, Src: 222.255.120.153 (222.255.120.153), Dst: 192.168.200.64
(192.168.200.64)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: 3036 (3036), Seq:
73, Ack: 31, Len: 23
File Transfer Protocol (FTP)
230 Login successful.\r\n
Response code: User logged in, proceed (230)
Response arg: Login successful.
0000 00 0b db 98 9b d1 00 30 cd 00 04 17 08 00 45 00 .......0......E.
0010 00 3f 15 02 40 00 3b 06 4a 35 de ff 78 99 c0 a8 [EMAIL
PROTECTED];.J5..x...
0020 c8 40 00 15 0b dc 04 d4 d0 0a 8a 80 6a e3 50 18 [EMAIL PROTECTED]
0030 16 d0 00 b7 00 00 32 33 30 20 4c 6f 67 69 6e 20 ......230 Login
0040 73 75 63 63 65 73 73 66 75 6c 2e 0d 0a successful...
No. Time Source Destination Protocol Info
22 0.109119 192.168.200.64 222.255.120.153 FTP
Request: CWD /autoupdate/
Frame 22 (72 bytes on wire, 72 bytes captured)
Ethernet II, Src: DellEsgP_98:9b:d1 (00:0b:db:98:9b:d1), Dst: Conexant_00:04:17
(00:30:cd:00:04:17)
Internet Protocol, Src: 192.168.200.64 (192.168.200.64), Dst: 222.255.120.153
(222.255.120.153)
Transmission Control Protocol, Src Port: 3036 (3036), Dst Port: ftp (21), Seq:
31, Ack: 96, Len: 18
File Transfer Protocol (FTP)
CWD /autoupdate/\r\n
Request command: CWD
Request arg: /autoupdate/
0000 00 30 cd 00 04 17 00 0b db 98 9b d1 08 00 45 00 .0............E.
0010 00 3a 19 5b 40 00 80 06 00 e1 c0 a8 c8 40 de ff .:[EMAIL PROTECTED]@..
0020 78 99 0b dc 00 15 8a 80 6a e3 04 d4 d0 21 50 18 x.......j....!P.
0030 ff a0 e0 ae 00 00 43 57 44 20 2f 61 75 74 6f 75 ......CWD /autou
0040 70 64 61 74 65 2f 0d 0a pdate/..
No. Time Source Destination Protocol Info
23 0.119071 222.255.120.153 192.168.200.64 FTP
Response: 250 Directory successfully changed.
Frame 23 (91 bytes on wire, 91 bytes captured)
Ethernet II, Src: Conexant_00:04:17 (00:30:cd:00:04:17), Dst: DellEsgP_98:9b:d1
(00:0b:db:98:9b:d1)
Internet Protocol, Src: 222.255.120.153 (222.255.120.153), Dst: 192.168.200.64
(192.168.200.64)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: 3036 (3036), Seq:
96, Ack: 49, Len: 37
File Transfer Protocol (FTP)
250 Directory successfully changed.\r\n
Response code: Requested file action okay, completed (250)
Response arg: Directory successfully changed.
0000 00 0b db 98 9b d1 00 30 cd 00 04 17 08 00 45 00 .......0......E.
0010 00 4d 15 04 40 00 3b 06 4a 25 de ff 78 99 c0 a8 [EMAIL
PROTECTED];.J%..x...
0020 c8 40 00 15 0b dc 04 d4 d0 21 8a 80 6a f5 50 18 [EMAIL PROTECTED]
0030 16 d0 56 97 00 00 32 35 30 20 44 69 72 65 63 74 ..V...250 Direct
0040 6f 72 79 20 73 75 63 63 65 73 73 66 75 6c 6c 79 ory successfully
0050 20 63 68 61 6e 67 65 64 2e 0d 0a changed...
No. Time Source Destination Protocol Info
24 0.262592 192.168.200.64 222.255.120.153 FTP
Request: TYPE I
Frame 24 (62 bytes on wire, 62 bytes captured)
Ethernet II, Src: DellEsgP_98:9b:d1 (00:0b:db:98:9b:d1), Dst: Conexant_00:04:17
(00:30:cd:00:04:17)
Internet Protocol, Src: 192.168.200.64 (192.168.200.64), Dst: 222.255.120.153
(222.255.120.153)
Transmission Control Protocol, Src Port: 3036 (3036), Dst Port: ftp (21), Seq:
49, Ack: 133, Len: 8
File Transfer Protocol (FTP)
TYPE I\r\n
Request command: TYPE
Request arg: I
0000 00 30 cd 00 04 17 00 0b db 98 9b d1 08 00 45 00 .0............E.
0010 00 30 19 5c 40 00 80 06 00 ea c0 a8 c8 40 de ff [EMAIL PROTECTED]@..
0020 78 99 0b dc 00 15 8a 80 6a f5 04 d4 d0 46 50 18 x.......j....FP.
0030 ff 7b e0 a4 00 00 54 59 50 45 20 49 0d 0a .{....TYPE I..
No. Time Source Destination Protocol Info
25 0.271159 222.255.120.153 192.168.200.64 FTP
Response: 200 Switching to Binary mode.
Frame 25 (85 bytes on wire, 85 bytes captured)
Ethernet II, Src: Conexant_00:04:17 (00:30:cd:00:04:17), Dst: DellEsgP_98:9b:d1
(00:0b:db:98:9b:d1)
Internet Protocol, Src: 222.255.120.153 (222.255.120.153), Dst: 192.168.200.64
(192.168.200.64)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: 3036 (3036), Seq:
133, Ack: 57, Len: 31
File Transfer Protocol (FTP)
200 Switching to Binary mode.\r\n
Response code: Command okay (200)
Response arg: Switching to Binary mode.
0000 00 0b db 98 9b d1 00 30 cd 00 04 17 08 00 45 00 .......0......E.
0010 00 47 15 06 40 00 3b 06 4a 29 de ff 78 99 c0 a8 [EMAIL
PROTECTED];.J)..x...
0020 c8 40 00 15 0b dc 04 d4 d0 46 8a 80 6a fd 50 18 [EMAIL PROTECTED]
0030 16 d0 ac 09 00 00 32 30 30 20 53 77 69 74 63 68 ......200 Switch
0040 69 6e 67 20 74 6f 20 42 69 6e 61 72 79 20 6d 6f ing to Binary mo
0050 64 65 2e 0d 0a de...
No. Time Source Destination Protocol Info
26 0.274013 192.168.200.64 222.255.120.153 FTP
Request: PORT 192,168,200,64,11,221
Frame 26 (82 bytes on wire, 82 bytes captured)
Ethernet II, Src: DellEsgP_98:9b:d1 (00:0b:db:98:9b:d1), Dst: Conexant_00:04:17
(00:30:cd:00:04:17)
Internet Protocol, Src: 192.168.200.64 (192.168.200.64), Dst: 222.255.120.153
(222.255.120.153)
Transmission Control Protocol, Src Port: 3036 (3036), Dst Port: ftp (21), Seq:
57, Ack: 164, Len: 28
File Transfer Protocol (FTP)
PORT 192,168,200,64,11,221\r\n
Request command: PORT
Request arg: 192,168,200,64,11,221
Active IP address: 192.168.200.64 (192.168.200.64)
Active port: 3037
0000 00 30 cd 00 04 17 00 0b db 98 9b d1 08 00 45 00 .0............E.
0010 00 44 19 5d 40 00 80 06 00 d5 c0 a8 c8 40 de ff [EMAIL PROTECTED]@..
0020 78 99 0b dc 00 15 8a 80 6a fd 04 d4 d0 65 50 18 x.......j....eP.
0030 ff 5c e0 b8 00 00 50 4f 52 54 20 31 39 32 2c 31 .\....PORT 192,1
0040 36 38 2c 32 30 30 2c 36 34 2c 31 31 2c 32 32 31 68,200,64,11,221
0050 0d 0a ..
No. Time Source Destination Protocol Info
27 0.285039 222.255.120.153 192.168.200.64 FTP
Response: 200 PORT command successful. Consider using PASV.
Frame 27 (105 bytes on wire, 105 bytes captured)
Ethernet II, Src: Conexant_00:04:17 (00:30:cd:00:04:17), Dst: DellEsgP_98:9b:d1
(00:0b:db:98:9b:d1)
Internet Protocol, Src: 222.255.120.153 (222.255.120.153), Dst: 192.168.200.64
(192.168.200.64)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: 3036 (3036), Seq:
164, Ack: 85, Len: 51
File Transfer Protocol (FTP)
200 PORT command successful. Consider using PASV.\r\n
Response code: Command okay (200)
Response arg: PORT command successful. Consider using PASV.
0000 00 0b db 98 9b d1 00 30 cd 00 04 17 08 00 45 00 .......0......E.
0010 00 5b 15 08 40 00 3b 06 4a 13 de ff 78 99 c0 a8 [EMAIL
PROTECTED];.J...x...
0020 c8 40 00 15 0b dc 04 d4 d0 65 8a 80 6b 19 50 18 [EMAIL PROTECTED]
0030 16 d0 36 5d 00 00 32 30 30 20 50 4f 52 54 20 63 ..6]..200 PORT c
0040 6f 6d 6d 61 6e 64 20 73 75 63 63 65 73 73 66 75 ommand successfu
0050 6c 2e 20 43 6f 6e 73 69 64 65 72 20 75 73 69 6e l. Consider usin
0060 67 20 50 41 53 56 2e 0d 0a g PASV...
No. Time Source Destination Protocol Info
28 0.285140 192.168.200.64 222.255.120.153 FTP
Request: SIZE update.ini
Frame 28 (71 bytes on wire, 71 bytes captured)
Ethernet II, Src: DellEsgP_98:9b:d1 (00:0b:db:98:9b:d1), Dst: Conexant_00:04:17
(00:30:cd:00:04:17)
Internet Protocol, Src: 192.168.200.64 (192.168.200.64), Dst: 222.255.120.153
(222.255.120.153)
Transmission Control Protocol, Src Port: 3036 (3036), Dst Port: ftp (21), Seq:
85, Ack: 215, Len: 17
File Transfer Protocol (FTP)
SIZE update.ini\r\n
Request command: SIZE
Request arg: update.ini
0000 00 30 cd 00 04 17 00 0b db 98 9b d1 08 00 45 00 .0............E.
0010 00 39 19 5e 40 00 80 06 00 df c0 a8 c8 40 de ff [EMAIL PROTECTED]@..
0020 78 99 0b dc 00 15 8a 80 6b 19 04 d4 d0 98 50 18 x.......k.....P.
0030 ff 29 e0 ad 00 00 53 49 5a 45 20 75 70 64 61 74 .)....SIZE updat
0040 65 2e 69 6e 69 0d 0a e.ini..
No. Time Source Destination Protocol Info
29 0.294987 222.255.120.153 192.168.200.64 FTP
Response: 213 120
Frame 29 (63 bytes on wire, 63 bytes captured)
Ethernet II, Src: Conexant_00:04:17 (00:30:cd:00:04:17), Dst: DellEsgP_98:9b:d1
(00:0b:db:98:9b:d1)
Internet Protocol, Src: 222.255.120.153 (222.255.120.153), Dst: 192.168.200.64
(192.168.200.64)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: 3036 (3036), Seq:
215, Ack: 102, Len: 9
File Transfer Protocol (FTP)
213 120\r\n
Response code: File status (213)
Response arg: 120
0000 00 0b db 98 9b d1 00 30 cd 00 04 17 08 00 45 00 .......0......E.
0010 00 31 15 0a 40 00 3b 06 4a 3b de ff 78 99 c0 a8 [EMAIL
PROTECTED];.J;..x...
0020 c8 40 00 15 0b dc 04 d4 d0 98 8a 80 6b 2a 50 18 [EMAIL PROTECTED]
0030 16 d0 10 d8 00 00 32 31 33 20 31 32 30 0d 0a ......213 120..
No. Time Source Destination Protocol Info
30 0.295122 192.168.200.64 222.255.120.153 FTP
Request: RETR update.ini
Frame 30 (71 bytes on wire, 71 bytes captured)
Ethernet II, Src: DellEsgP_98:9b:d1 (00:0b:db:98:9b:d1), Dst: Conexant_00:04:17
(00:30:cd:00:04:17)
Internet Protocol, Src: 192.168.200.64 (192.168.200.64), Dst: 222.255.120.153
(222.255.120.153)
Transmission Control Protocol, Src Port: 3036 (3036), Dst Port: ftp (21), Seq:
102, Ack: 224, Len: 17
File Transfer Protocol (FTP)
RETR update.ini\r\n
Request command: RETR
Request arg: update.ini
0000 00 30 cd 00 04 17 00 0b db 98 9b d1 08 00 45 00 .0............E.
0010 00 39 19 5f 40 00 80 06 00 de c0 a8 c8 40 de ff [EMAIL PROTECTED]@..
0020 78 99 0b dc 00 15 8a 80 6b 2a 04 d4 d0 a1 50 18 x.......k*....P.
0030 ff 20 e0 ad 00 00 52 45 54 52 20 75 70 64 61 74 . ....RETR updat
0040 65 2e 69 6e 69 0d 0a e.ini..
No. Time Source Destination Protocol Info
31 0.305315 222.255.120.153 192.168.200.64 TCP
ftp-data > 3037 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1432 TSV=1460722714 TSER=0
WS=8
Frame 31 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Conexant_00:04:17 (00:30:cd:00:04:17), Dst: DellEsgP_98:9b:d1
(00:0b:db:98:9b:d1)
Internet Protocol, Src: 222.255.120.153 (222.255.120.153), Dst: 192.168.200.64
(192.168.200.64)
Transmission Control Protocol, Src Port: ftp-data (20), Dst Port: 3037 (3037),
Seq: 0, Ack: 0, Len: 0
0000 00 0b db 98 9b d1 00 30 cd 00 04 17 08 00 45 00 .......0......E.
0010 00 3c 9e 5c 40 00 3b 06 c0 dd de ff 78 99 c0 a8 .<[EMAIL
PROTECTED];.....x...
0020 c8 40 00 14 0b dd 04 30 42 46 00 00 00 00 a0 02 [EMAIL PROTECTED]
0030 16 d0 cb 36 00 00 02 04 05 98 04 02 08 0a 57 10 ...6..........W.
0040 dc 1a 00 00 00 00 01 03 03 08 ..........
No. Time Source Destination Protocol Info
32 0.305382 192.168.200.64 222.255.120.153 TCP 3037 >
ftp-data [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 WS=0 TSV=0 TSER=0
Frame 32 (78 bytes on wire, 78 bytes captured)
Ethernet II, Src: DellEsgP_98:9b:d1 (00:0b:db:98:9b:d1), Dst: Conexant_00:04:17
(00:30:cd:00:04:17)
Internet Protocol, Src: 192.168.200.64 (192.168.200.64), Dst: 222.255.120.153
(222.255.120.153)
Transmission Control Protocol, Src Port: 3037 (3037), Dst Port: ftp-data (20),
Seq: 0, Ack: 1, Len: 0
0000 00 30 cd 00 04 17 00 0b db 98 9b d1 08 00 45 00 .0............E.
0010 00 40 19 60 40 00 80 06 00 d6 c0 a8 c8 40 de ff [EMAIL
PROTECTED]@[EMAIL PROTECTED]
0020 78 99 0b dd 00 14 2c 22 12 f1 04 30 42 47 b0 12 x.....,"...0BG..
0030 ff ff c3 f3 00 00 02 04 05 b4 01 03 03 00 01 01 ................
0040 08 0a 00 00 00 00 00 00 00 00 01 01 04 02 ..............
No. Time Source Destination Protocol Info
33 0.315026 222.255.120.153 192.168.200.64 TCP
ftp-data > 3037 [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=1460722724 TSER=0
Frame 33 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Conexant_00:04:17 (00:30:cd:00:04:17), Dst: DellEsgP_98:9b:d1
(00:0b:db:98:9b:d1)
Internet Protocol, Src: 222.255.120.153 (222.255.120.153), Dst: 192.168.200.64
(192.168.200.64)
Transmission Control Protocol, Src Port: ftp-data (20), Dst Port: 3037 (3037),
Seq: 1, Ack: 1, Len: 0
0000 00 0b db 98 9b d1 00 30 cd 00 04 17 08 00 45 00 .......0......E.
0010 00 34 9e 5e 40 00 3b 06 c0 e3 de ff 78 99 c0 a8 [EMAIL
PROTECTED];.....x...
0020 c8 40 00 14 0b dd 04 30 42 47 2c 22 12 f2 80 10 [EMAIL PROTECTED],"....
0030 00 17 d1 72 00 00 01 01 08 0a 57 10 dc 24 00 00 ...r......W..$..
0040 00 00 ..
No. Time Source Destination Protocol Info
34 0.323243 222.255.120.153 192.168.200.64 FTP
Response: 150 Opening BINARY mode data connection for update.ini (120 bytes).
Frame 34 (123 bytes on wire, 123 bytes captured)
Ethernet II, Src: Conexant_00:04:17 (00:30:cd:00:04:17), Dst: DellEsgP_98:9b:d1
(00:0b:db:98:9b:d1)
Internet Protocol, Src: 222.255.120.153 (222.255.120.153), Dst: 192.168.200.64
(192.168.200.64)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: 3036 (3036), Seq:
224, Ack: 119, Len: 69
File Transfer Protocol (FTP)
150 Opening BINARY mode data connection for update.ini (120 bytes).\r\n
Response code: File status okay; about to open data connection (150)
Response arg: Opening BINARY mode data connection for update.ini (120
bytes).
0000 00 0b db 98 9b d1 00 30 cd 00 04 17 08 00 45 00 .......0......E.
0010 00 6d 15 0c 40 00 3b 06 49 fd de ff 78 99 c0 a8 [EMAIL
PROTECTED];.I...x...
0020 c8 40 00 15 0b dc 04 d4 d0 a1 8a 80 6b 3b 50 18 [EMAIL PROTECTED];P.
0030 16 d0 49 52 00 00 31 35 30 20 4f 70 65 6e 69 6e ..IR..150 Openin
0040 67 20 42 49 4e 41 52 59 20 6d 6f 64 65 20 64 61 g BINARY mode da
0050 74 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 66 6f ta connection fo
0060 72 20 75 70 64 61 74 65 2e 69 6e 69 20 28 31 32 r update.ini (12
0070 30 20 62 79 74 65 73 29 2e 0d 0a 0 bytes)...
No. Time Source Destination Protocol Info
35 0.325275 222.255.120.153 192.168.200.64 FTP-DATA FTP
Data: 120 bytes
Frame 35 (186 bytes on wire, 186 bytes captured)
Ethernet II, Src: Conexant_00:04:17 (00:30:cd:00:04:17), Dst: DellEsgP_98:9b:d1
(00:0b:db:98:9b:d1)
Internet Protocol, Src: 222.255.120.153 (222.255.120.153), Dst: 192.168.200.64
(192.168.200.64)
Transmission Control Protocol, Src Port: ftp-data (20), Dst Port: 3037 (3037),
Seq: 1, Ack: 1, Len: 120
FTP Data
0000 00 0b db 98 9b d1 00 30 cd 00 04 17 08 00 45 00 .......0......E.
0010 00 ac 9e 60 40 00 3b 06 c0 69 de ff 78 99 c0 a8 [EMAIL
PROTECTED];..i..x...
0020 c8 40 00 14 0b dd 04 30 42 47 2c 22 12 f2 80 18 [EMAIL PROTECTED],"....
0030 00 17 b1 34 00 00 01 01 08 0a 57 10 dc 2c 00 00 ...4......W..,..
0040 00 00 5b 65 64 69 74 69 6f 6e 5f 72 65 6c 65 61 ..[edition_relea
0050 73 65 5d 0a 6e 61 6d 65 3d bd a3 cf c0 c7 e9 d4 se].name=.......
0060 b5 d5 fd ca bd b7 fe ce f1 c6 f7 c9 fd bc b6 c4 ................
0070 bf c2 bc 0a 64 69 72 3d 31 30 78 0a 64 65 73 63 ....dir=10x.desc
0080 72 69 70 74 69 6f 6e 3d bd a3 cf c0 c7 e9 d4 b5 ription=........
0090 d5 fd ca bd b7 fe ce f1 c6 f7 c9 fd bc b6 c4 bf ................
00a0 c2 bc 0a 61 70 70 6c 69 63 61 74 69 6f 6e 3d 67 ...application=g
00b0 61 6d 65 5f 59 2e 65 78 65 0a ame_Y.exe.
No. Time Source Destination Protocol Info
36 0.325746 222.255.120.153 192.168.200.64 FTP
Response: 226 File send OK.
Frame 36 (73 bytes on wire, 73 bytes captured)
Ethernet II, Src: Conexant_00:04:17 (00:30:cd:00:04:17), Dst: DellEsgP_98:9b:d1
(00:0b:db:98:9b:d1)
Internet Protocol, Src: 222.255.120.153 (222.255.120.153), Dst: 192.168.200.64
(192.168.200.64)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: 3036 (3036), Seq:
293, Ack: 119, Len: 19
File Transfer Protocol (FTP)
226 File send OK.\r\n
Response code: Closing data connection (226)
Response arg: File send OK.
0000 00 0b db 98 9b d1 00 30 cd 00 04 17 08 00 45 00 .......0......E.
0010 00 3b 15 0e 40 00 3b 06 4a 2d de ff 78 99 c0 a8 .;[EMAIL
PROTECTED];.J-..x...
0020 c8 40 00 15 0b dc 04 d4 d0 e6 8a 80 6b 3b 50 18 [EMAIL PROTECTED];P.
0030 16 d0 54 84 00 00 32 32 36 20 46 69 6c 65 20 73 ..T...226 File s
0040 65 6e 64 20 4f 4b 2e 0d 0a end OK...
No. Time Source Destination Protocol Info
37 0.325771 192.168.200.64 222.255.120.153 TCP 3036 >
ftp [ACK] Seq=119 Ack=312 Win=65224 [TCP CHECKSUM INCORRECT] Len=0
Frame 37 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: DellEsgP_98:9b:d1 (00:0b:db:98:9b:d1), Dst: Conexant_00:04:17
(00:30:cd:00:04:17)
Internet Protocol, Src: 192.168.200.64 (192.168.200.64), Dst: 222.255.120.153
(222.255.120.153)
Transmission Control Protocol, Src Port: 3036 (3036), Dst Port: ftp (21), Seq:
119, Ack: 312, Len: 0
0000 00 30 cd 00 04 17 00 0b db 98 9b d1 08 00 45 00 .0............E.
0010 00 28 19 61 40 00 80 06 00 ed c0 a8 c8 40 de ff .([EMAIL PROTECTED]@..
0020 78 99 0b dc 00 15 8a 80 6b 3b 04 d4 d0 f9 50 10 x.......k;....P.
0030 fe c8 e0 9c 00 00 ......
