Wireshark · Ethereal-dev: Re: [Ethereal-dev] Protocol Identification

[LEGO <luis.ontanon@xxxxxxxxx>]

it "reads" the parameters of the PORT or PASV commands to create a
conversation. From there on every packet that "matches" the
conversation is "known" to be ftp-data.


On 7/18/05, Duncan Godfrey <d.j.godfrey@xxxxxxxxxxxxx> wrote:
> Would some be able to help me with a quick question, how does Ethereal
> identify FTP-Data packets -  specificaly the ones which don't use either
> source or destination port 20 that is.
> 
> I have been going through the source but Im a bit overwhelmed and cant
> locate the section with the packet analysis.
> 
> Thank you in advance for any help,
> 
> Duncan Godfrey
> 
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
> 


-- 
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan