Dissecting FTP communication packets

There are two types of mode a client can use to communicate with a server: active and passive. In earlier versions of FTP server applications, active mode was enabled by default, but in the latest versions of FTP server applications, passive mode is enabled by default. For understanding these modes in detail, let's use the following scenario.

Let's say an FTP server is configured at IP 172.16.136.129 and a client at IP 172.16.136.1.

Typically, every request sent from the client is a specific command set, to which the server responds with a numerical value followed by a text message. See the following screenshot for reference followed by a short analysis:

The server requested the password, which the client ...

Get Wireshark 2 Quick Start Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.