This is our old Q&A Site. Please post any new questions and answers at

Hi, I have been asked to run Wireshark on a server using an FTP filter but can't seem to find the right way to do this....can anyone assist?

asked 05 Jun '13, 08:18

sharwal's gravatar image

accept rate: 0%

On display filter For FTP Control connection do tcp.port==21 and For FTP Data connection do tcp.port==20 For both(tcp.port==21 || tcp.port==20) If you type ft in display filter box that will show you all display filters starting with ft..You can make use of that too.I am seeing ftp and ftp-data.

On capture filter port 21 or port 20

permanent link

answered 05 Jun '13, 08:28

krishnayeddula's gravatar image

accept rate: 6%

edited 05 Jun '13, 08:31

Thats what I saw only as well....thanks

(05 Jun '13, 08:30) sharwal
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 05 Jun '13, 08:18

question was seen: 43,345 times

last updated: 25 Oct '13, 07:16

p​o​w​e​r​e​d by O​S​Q​A