Ask Your Question
0

Secure FTP Failed

asked 2024-11-14 08:27:55 +0000

abbas gravatar image

updated 2024-11-14 08:29:15 +0000

SYN-bit gravatar image

Hello,

I am trying to copy the files from one network to a different network segment. It starts the session fine, and then it fails. The firewall logs shows that the firewall blocking the packet as a brute force attack. I capture a WireShark Logs, but I was not able to see anything related to Brute Force. I filtered the "tcp.flags.sync==1 between a source and the destination, and that is what I seeing continuously.

From Source (1.1.1.1) to Destination (2.2.2.2)-------------[SYN,ECE,CWR], MSS=1460, WS=256 SACK_PERM
From Source (2.2.2.2) to Destination (1.1.1.1)-------------[SYN,ACLK,ECE], MSS=1460, WS=256 SACK_PERM

Can someone shed some light since I just started using WireShark

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2024-11-14 08:32:09 +0000

SYN-bit gravatar image

If you do not see the final ACK of the 3-way-handshake and only see SYN, SYNACK repeatedly, then either 1.1.1.1 is not receiving the SYN/ACK or it is and it is not sending the final ACK or the final ACK from 1.1.1.1 to 2.2.2.2 is blocked between 1.1.1.1 and the capture point.

You will have to focus your investigation to the host 1.1.1.1 and the part of the network between 1.1.1.1 and the point where you made the capture.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2024-11-14 08:27:55 +0000

Seen: 17 times

Last updated: 21 hours ago