Dear Sir, I'm a new to Wire-shark and i need to analyzer the FTP packet only, I used your Wire-shark program and i chose a TCP only in the filtering but when i enabled the TCP only i received all the TCP, So i need to filter the FTP data only Could you help me. Best regards Mohamed Hamed asked 14 Apr '14, 02:49  ambitious |
One Answer:
Try filtering on "ftp or ftp-data". answered 14 Apr '14, 02:57  Jasper ♦♦ |
where can i find this filter?
I guess you mean where to enter it? Try the filter input field below the toolbar buttons.
If you want a full list of filters try the expression builder.
Thanks Jasper for your great support I found it and i choose this filter, but thier is no data appeared when i chose either FTP data nor FTP
Note: I make a local FTP server and client @ address 127.0.0.1 using fileZilla server and client @ the same PC
@ambitious: that does not work, as Wireshark on Windows (actually the WinPcap library) cannot capture localhost traffic.
Please use RawCap instead.
BTW: For further questions: Please add as much detail as possible. We could have told you the problem with 127.0.0.1 in the first place, if you had mentioned it.
Thanks Jasper