Ask Your Question
0

How can I get FTP conversation completeness values that are even

asked 2023-10-02 14:46:13 +0000

I am trying to find why a certain file would crash the FreeRTOS FTP server we are using. Analyzing the captured packets with WireShark (Version 4.0.8 (v4.0.8-0-g81696bb74857)) I see that the FTP data transfers all have an even completeness value indicating that no TCP SYNC would have been seen. I do see the SYNC packet in the captures though!

192.168.0.100   192.168.0.200 TCP      66   57911 49657 Incomplete (30)          57911 → 49657 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=128 SACK_PERM
192.168.0.200   192.168.0.100 TCP      66   49657 57911 Incomplete (30)          49657 → 57911 [SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1460 WS=1 SACK_PERM
192.168.0.100   192.168.0.200 TCP      54   57911 49657 Incomplete (30)          57911 → 49657 [ACK] Seq=1 Ack=1 Win=4194304 Len=0
192.168.0.200   192.168.0.100 TCP      60   21    57825 Complete, WITH_DATA (31) 21 → 57825 [ACK] Seq=12701 Ack=2846 Win=1460 Len=0
192.168.0.200   192.168.0.100 FTP      106  21    57825 Complete, WITH_DATA (31) Response: 150 Accepted data connection from c0a80064ip:57911
192.168.0.200   192.168.0.100 FTP-DATA 1514 49657 57911 Incomplete (30)          FTP Data: 1460 bytes (PASV) (RETR Level_2023-09-15_05)
192.168.0.200   192.168.0.100 FTP-DATA 642  49657 57911 Incomplete (30)          FTP Data: 588 bytes (PASV) (RETR Level_2023-09-15_05)
edit retag flag offensive close merge delete

1 Answer

Sort by » oldest newest most voted
0

answered 2023-10-02 15:16:51 +0000

Chuckc gravatar image
edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2023-10-02 14:46:13 +0000

Seen: 149 times

Last updated: Oct 02 '23