This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Filter FTP

0

Hi, I have been asked to run Wireshark on a server using an FTP filter but can't seem to find the right way to do this....can anyone assist?

asked 05 Jun '13, 08:18

sharwal's gravatar image

sharwal
11334
accept rate: 0%


One Answer:

0

On display filter For FTP Control connection do tcp.port==21 and For FTP Data connection do tcp.port==20 For both(tcp.port==21 || tcp.port==20) If you type ft in display filter box that will show you all display filters starting with ft..You can make use of that too.I am seeing ftp and ftp-data.

On capture filter port 21 or port 20

answered 05 Jun '13, 08:28

krishnayeddula's gravatar image

krishnayeddula
629354148
accept rate: 6%

edited 05 Jun '13, 08:31

Thats what I saw only as well....thanks

(05 Jun '13, 08:30) sharwal