Wireshark · Ethereal-dev: RE: [Ethereal-dev] Protocol Identification

["Giles Scott" <gscott@xxxxxxxxxxxxxxxxx>]

For passive FTP see;

epan/dissectors/packet-ftp.c

Function dissect_ftp

Then look for 'is_pasv_response'

Cheers

Giles



-----Original Message-----
From: ethereal-dev-bounces@xxxxxxxxxxxx
[mailto:ethereal-dev-bounces@xxxxxxxxxxxx] On Behalf Of Duncan Godfrey
Sent: Monday, July 18, 2005 5:15 PM
To: ethereal-dev@xxxxxxxxxxxx
Subject: [Ethereal-dev] Protocol Identification

Would some be able to help me with a quick question, how does Ethereal 
identify FTP-Data packets -  specificaly the ones which don't use either

source or destination port 20 that is.

I have been going through the source but Im a bit overwhelmed and cant 
locate the section with the packet analysis.

Thank you in advance for any help,

Duncan Godfrey

_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev