This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Monitoring FTP on a different port number

0

Greetings - I was wondering if it possible to monitor FTP traffic to a different port number. I mean, I know it is and I can see it but just cannot see the usual FTP communications i.e. user logs in, password posting. All I see is TCP protocol no FTP at all. Data is initiated from outside to our server. Thank you for your feedback. Mike

asked 23 May '16, 05:25

adrianvas12's gravatar image

adrianvas12
6●1●1●2
accept rate: 0%

edited 23 May '16, 06:34

grahamb's gravatar image

grahamb ♦
19.8k●3●30●206

One Answer:

0

Right-click a packet you know to belong to the "ftp to different port" control session in the packet-list, choose Decode as... from the context menu, and select FTP in the last column (named Current), and press the OK button. That should do the trick, including automatic detection of the data transmission sessions initiated by that control session.

answered 23 May '16, 05:34

sindy's gravatar image

sindy
6.0k●4●8●51
accept rate: 24%

edited 23 May '16, 05:34