This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.
0
1

hi, I want to capture FTP Files with Wireshark. I send data between a FTP-Server (PLC) and a FTP-Client (IPC, with Windows Embedded Compact). My PC, the PLC and the IPC are in the same Network, connected with a switch. How can i capture the FTP traffic between the server and the Client?

best regards

Frank

asked 05 May '14, 04:53

Fr_Bier's gravatar image

Fr_Bier
11123
accept rate: 0%

Thanks for the fast answers. I will try to get a HUB or managed switch and catch the files! :-)

(05 May '14, 05:43) Fr_Bier

Take a look at this Wiki page: http://wiki.wireshark.org/CaptureSetup/Ethernet

permanent link

answered 05 May '14, 05:33

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

Thanks for your help.

I used a mirror Port on my Switch, so i can see the TCP data.

Best gegards Frank

(11 May '14, 22:39) Fr_Bier

connected with a switch. How can i capture the FTP traffic between the server and the Client?

by capturing on a mirror port of the switch.

http://wiki.wireshark.org/CaptureSetup/Ethernet#Capture_using_a_monitor_mode_of_the_switch

If your switch does not offer a mirror/monitor port, please try anyone of the other methods described in the link above. If none of the options are applicable in your environment, try to install Wireshark on the FTP-Server (provided, it is running an OS that supports Wireshark).

Regards
Kurt

permanent link

answered 05 May '14, 05:36

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

1

@Jasper was 3 minutes faster .... ;-)

(05 May '14, 05:38) Kurt Knochner ♦

you can make a man in the middle attack. Use "netwox 72" to change the arp table in bouth machines. Enable Ip forward in your machine and then just capture with wireshark.

permanent link

answered 12 May '14, 13:22

fachav2's gravatar image

fachav2
31226
accept rate: 0%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×56

question asked: 05 May '14, 04:53

question was seen: 5,553 times

last updated: 12 May '14, 13:22

p​o​w​e​r​e​d by O​S​Q​A