Ethereal-dev: RE: [ethereal-dev] Filtering on ftp data

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Jeff Foster <jfoste@xxxxxxxxxxxx>
Date: Mon, 25 Sep 2000 13:01:41 -0500

> How can I make ftp-data filterable?

tcp.port == 20 will work as the filter.  There isn't any protocol
item for ftp data.

If you are talking about adding a protocol for ftp data, modify the 
dissect_ftpdata routine in packet-ftp.c to add the ftp-data item
and tree.

And if you really feel like doing some work, check the ftp
command stream for PORT and PASV commands then create conversations
for each of the ftp data streams. 

Jeff Foster
jfoste@woodward




Regards
-------
Richard Sharpe, sharpe@xxxxxxxxxx
Samba (Team member, www.samba.org), Ethereal (Team member, www.zing.org)
Contributing author, SAMS Teach Yourself Samba in 24 Hours
Author, Special Edition, Using Samba