This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

how to capture FTP files between two devices?

0
1

hi, I want to capture FTP Files with Wireshark. I send data between a FTP-Server (PLC) and a FTP-Client (IPC, with Windows Embedded Compact). My PC, the PLC and the IPC are in the same Network, connected with a switch. How can i capture the FTP traffic between the server and the Client?

best regards

Frank

asked 05 May '14, 04:53

Fr_Bier's gravatar image

Fr_Bier
11123
accept rate: 0%

Thanks for the fast answers. I will try to get a HUB or managed switch and catch the files! :-)

(05 May '14, 05:43) Fr_Bier

3 Answers:

1

answered 05 May '14, 05:33

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

Thanks for your help.

I used a mirror Port on my Switch, so i can see the TCP data.

Best gegards Frank

(11 May '14, 22:39) Fr_Bier

1

connected with a switch. How can i capture the FTP traffic between the server and the Client?

by capturing on a mirror port of the switch.

http://wiki.wireshark.org/CaptureSetup/Ethernet#Capture_using_a_monitor_mode_of_the_switch

If your switch does not offer a mirror/monitor port, please try anyone of the other methods described in the link above. If none of the options are applicable in your environment, try to install Wireshark on the FTP-Server (provided, it is running an OS that supports Wireshark).

Regards
Kurt

answered 05 May '14, 05:36

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

1

@Jasper was 3 minutes faster .... ;-)

(05 May '14, 05:38) Kurt Knochner ♦

0

you can make a man in the middle attack. Use "netwox 72" to change the arp table in bouth machines. Enable Ip forward in your machine and then just capture with wireshark.

answered 12 May '14, 13:22

fachav2's gravatar image

fachav2
31226
accept rate: 0%