Pb FTP avec Firewall - Persiste


#1

Bonjour,

Voici l’extrait de mes règles FORWARD sur les connexions établies :

[code]# Tables FORWARD interdite par défaut.
iptables -P FORWARD DROP

Autorisation des connections établies.

iptables -A FORWARD -i eth0 -o br0 -p tcp --dport 20 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -i eth0 -o br0 -p tcp --dport 21 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -i eth0 -o br0 -p tcp --dport 443 -m state --state ESTABLISHED,RELATED -j ACCEPT

iptables -A FORWARD -i eth0 -m physdev --physdev-out eth2 -d 192.168.x.5 -p tcp --sport 80 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -i eth0 -m physdev --physdev-out eth2 -d 192.168.x.5 -p udp --sport 53 -m state --state ESTABLISHED,RELATED -j ACCEPT

iptables -A FORWARD -i eth0 -m physdev --physdev-out eth2 -d 192.168.x.10 -p tcp --sport 80 -m state --state ESTABLISHED,RELATED -j ACCEPT

Activation du forward.

echo 1 > /proc/sys/net/ipv4/ip_forward

Activation du FTP ACTIF.

modprobe ip_nat_ftp

Autorisation d’acces à Internet entre les ports 1 à 1024.

iptables -A FORWARD -i br0 -o eth0 -d 0.0.0.0/0 -p tcp --dport 20 -j ACCEPT
iptables -A FORWARD -i br0 -o eth0 -d 0.0.0.0/0 -p tcp --dport 21 -j ACCEPT
iptables -A FORWARD -i br0 -o eth0 -s 192.168.x.5 -d 0.0.0.0/0 -p udp --dport 53 -j ACCEPT
iptables -A FORWARD -i br0 -o eth0 -d 0.0.0.0/0 -p tcp --dport 80 -j ACCEPT
iptables -A FORWARD -i br0 -o eth0 -d 0.0.0.0/0 -p tcp --dport 443 -j ACCEPT[/code]

-eth1 eth0--FW-eth2 avec br0 comme bridge sur eth1, eth2 et eth3 -eth3

x.5 est le serveur DNS et x.10 le serveur Proxy. Ces deux derniers arrivent sans problème à joindre les serveur DNS extèrieurs et à aller sur l’internet. Cependant, ils n’arrivent pas à se connecter à un serveur FTP…

Il me semble que je l’ai autorisé… Quelqu’un peut-il y jetter un coup d’oeil et me dire ce qu’il en pense ?

Merci d’avance !!


#2

ip_nat_ftp c’est pas pour du FTP Passif, mais pour du FTP ACTIF


#3

Oui, autant pour moi…


#4

Sur ce genre de problèmes, il faut activer le LOG iptables, et jouer avec tcpdump pour comprendre ce qu’il se passe.


#5

Voici les logs sur le Forward des demandes de la machine en 192.168.x.5 vers ftp.free.fr (213.228.0.141) :

Apr 11 10:22:22 localhost kernel: LOG-FENTIN=br0 OUT=eth0 PHYSIN=eth2 SRC=192.168.x.5 DST=192.168.86.1 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=35309 PROTO=TCP SPT=139 DPT=1211 WINDOW=16384 RES=0x00 ACK SYN URGP=0 Apr 11 10:22:26 localhost kernel: LOG-FSORIN=eth0 OUT=br0 PHYSOUT=eth2 SRC=213.228.0.141 DST=192.168.x.5 LEN=48 TOS=0x00 PREC=0x00 TTL=47 ID=0 DF PROTO=TCP SPT=21 DPT=3700 WINDOW=5840 RES=0x00 ACK SYN URGP=0 Apr 11 10:22:36 localhost kernel: LOG-FENTIN=br0 OUT=eth0 PHYSIN=eth2 SRC=192.168.x.5 DST=192.168.120.1 LEN=365 TOS=0x00 PREC=0x00 TTL=127 ID=35431 PROTO=UDP SPT=137 DPT=137 LEN=345 Apr 11 10:22:38 localhost kernel: LOG-FENTIN=br0 OUT=eth0 PHYSIN=eth2 SRC=192.168.x.5 DST=192.168.120.1 LEN=365 TOS=0x00 PREC=0x00 TTL=127 ID=35446 PROTO=UDP SPT=137 DPT=137 LEN=345 Apr 11 10:22:39 localhost kernel: LOG-FENTIN=br0 OUT=eth0 PHYSIN=eth2 SRC=192.168.x.5 DST=192.168.120.1 LEN=365 TOS=0x00 PREC=0x00 TTL=127 ID=35452 PROTO=UDP SPT=137 DPT=137 LEN=345 Apr 11 10:22:47 localhost kernel: LOG-FSORIN=eth0 OUT=br0 PHYSOUT=eth2 SRC=213.228.0.141 DST=192.168.x.5 LEN=48 TOS=0x00 PREC=0x00 TTL=47 ID=0 DF PROTO=TCP SPT=21 DPT=3701 WINDOW=5840 RES=0x00 ACK SYN URGP=0 Apr 11 10:22:48 localhost kernel: LOG-FSORIN=eth0 OUT=br0 PHYSOUT=eth2 SRC=213.228.0.141 DST=192.168.x.5 LEN=48 TOS=0x00 PREC=0x00 TTL=47 ID=0 DF PROTO=TCP SPT=21 DPT=3700 WINDOW=5840 RES=0x00 ACK SYN URGP=0 Apr 11 10:22:50 localhost kernel: LOG-FSORIN=eth0 OUT=br0 PHYSOUT=eth2 SRC=213.228.0.141 DST=192.168.x.5 LEN=48 TOS=0x00 PREC=0x00 TTL=47 ID=0 DF PROTO=TCP SPT=21 DPT=3701 WINDOW=5840 RES=0x00 ACK SYN URGP=0 Apr 11 10:23:09 localhost kernel: LOG-FSORIN=eth0 OUT=br0 PHYSOUT=eth2 SRC=213.228.0.141 DST=192.168.x.5 LEN=48 TOS=0x00 PREC=0x00 TTL=47 ID=0 DF PROTO=TCP SPT=21 DPT=3701 WINDOW=5840 RES=0x00 ACK SYN URGP=0 Apr 11 10:23:22 localhost kernel: LOG-FENTIN=br0 OUT=eth0 PHYSIN=eth2 SRC=192.168.x.5 DST=192.168.163.1 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=35503 PROTO=TCP SPT=139 DPT=1294 WINDOW=16384 RES=0x00 ACK SYN URGP=0 Apr 11 10:23:24 localhost kernel: LOG-FENTIN=br0 OUT=eth0 PHYSIN=eth2 SRC=192.168.x.5 DST=192.168.163.1 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=35549 PROTO=TCP SPT=139 DPT=1294 WINDOW=16384 RES=0x00 ACK SYN URGP=0 Apr 11 10:23:33 localhost kernel: LOG-FENTIN=br0 OUT=eth0 PHYSIN=eth2 SRC=192.168.x.5 DST=192.168.163.1 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=35569 PROTO=TCP SPT=139 DPT=1294 WINDOW=16384 RES=0x00 ACK SYN URGP=0

Je ne comprends pas ce que viennent faire les adresses 192.168.86.1 et 192.168.120.1 ou encore 192.168.163.1 ??


#6

Voici le sniff rendu avec tcpdump :

De eth2 --> eth0 :

10:45:17.252531 IP 192.168.x.5.3790 > ftp.proxad.net.ftp: S 84421290:84421290(0) win 65535 <mss 1460,nop,nop,sackOK> 10:45:20.297729 IP 192.168.x.5.3790 > ftp.proxad.net.ftp: S 84421290:84421290(0) win 65535 <mss 1460,nop,nop,sackOK> 10:45:26.313234 IP 192.168.x.5.3790 > ftp.proxad.net.ftp: S 84421290:84421290(0) win 65535 <mss 1460,nop,nop,sackOK>

De eth0 --> eth2 :

10:49:43.044418 IP 192.168.y.2.3816 > ftp.proxad.net.ftp: S 3835577037:3835577037(0) win 65535 <mss 1460,nop,nop,sackOK> 10:49:43.091858 IP ftp.proxad.net.ftp > 192.168.y.2.3816: S 4261846297:4261846297(0) ack 3835577038 win 5840 <mss 1460,nop,nop,sackOK> 10:49:45.965487 IP 192.168.y.2.3816 > ftp.proxad.net.ftp: S 3835577037:3835577037(0) win 65535 <mss 1460,nop,nop,sackOK> 10:49:46.018283 IP ftp.proxad.net.ftp > 192.168.y.2.3816: S 4261846297:4261846297(0) ack 3835577038 win 5840 <mss 1460,nop,nop,sackOK> 10:49:46.833271 IP ftp.proxad.net.ftp > 192.168.y.2.3816: S 4261846297:4261846297(0) ack 3835577038 win 5840 <mss 1460,nop,nop,sackOK> 10:49:51.981019 IP 192.168.y.2.3816 > ftp.proxad.net.ftp: S 3835577037:3835577037(0) win 65535 <mss 1460,nop,nop,sackOK> 10:49:52.029561 IP ftp.proxad.net.ftp > 192.168.y.2.3816: S 4261846297:4261846297(0) ack 3835577038 win 5840 <mss 1460,nop,nop,sackOK> 10:49:52.834913 IP ftp.proxad.net.ftp > 192.168.y.2.3816: S 4261846297:4261846297(0) ack 3835577038 win 5840 <mss 1460,nop,nop,sackOK> 10:50:04.832638 IP ftp.proxad.net.ftp > 192.168.y.2.3816: S 4261846297:4261846297(0) ack 3835577038 win 5840 <mss 1460,nop,nop,sackOK>

192.168.y.2 étant l’adresse de la passerelle en eth0.


#7

essayes de te connecter depuis un de tes serveurs en ftp ou tu veux, et une fois connecté, fais un QUOTE PASV (ou quote PASV, pour envoyer au serveur distant l’ordre de passer en mode passif), puis fais un ls et regardes si tu as un retour.
Si ca passe en PASV, mais que le ls s’eternise quand tu n’es pas en mode passif, c’est que tu as un pb de masquerading ftp.
Vérifies alors que tu as bien les modules ip_conntrack_ftp ou ip_nat_ftp (je ne sais plus lequel) de chargés sur ton routeur.


#8

PS: INTUITION – pour débuguer, ajoutes une règle en ACCEPT sur tout paquet ESTABLISHED,RELATED pour tous les ports, et quel que soit le sens.


#9

Le truc, c’est qu’avant le ESTABLISHED,RELATED était en ACCEPT pour tout le monde sur tous les ports et le FTP passait sans problème…

Je vais m’atteler à regarder ce qui se passe en se connectant directement depuis le serveur sur un serveur FTP et retransmets en direct ce qui se passe!! :slightly_smiling:


#10

Réponse :

Je me suis connecté sans problème depuis la passerelle à mon espace ftp perso de free et le passage en ‘quote PASV’ s’est déroulé sans aucun problème et le ‘ls’ a fonctionné.


#11

Je n’arrive toujours pas à me connecter à serveur FTP depuis une machine derrière la passerelle…


#12

AU P----- LE BOULET !!!

Faut que je dorme sinon ca va être la cata au BTS…

Ca ne passait pas parce que je n’ai pas mis les choses dans le bon sens…

C’est :
iptables -A FORWARD -i eth0 -o br0 -p tcp –Sport 21 -m state --state ESTABLISHED,RELATED -j ACCEPT

Non pas :
iptables -A FORWARD -i eth0 -o br0 -p tcp --dport 21 -m state --state ESTABLISHED,RELATED -j ACCEPT

C’est la source pas la destination…

Merci à tous en tout cas pour les tuyaux !!


#13

Alors, voici un peu plus de précision sur le problème :
J’arrive sans problème à me connecter sur mon compte ftp perso de free et à lister les dossiers puis à passer en mode passif et de lister les dossiers et ce depuis n’importe quel poste derrière la passerelle.

Cependant je n’arrive pas à lister les dossier si je me connecte en anonymous sur un serveur FTP :

[code]# ftp ftp.free.fr
Connected to ftp.proxad.net.
220 Welcome to ProXad FTP server
Name (ftp.free.fr:root): anonymous
331 Please specify the password.
Password:
230-Welcome to Free.fr/ProXad.net mirror server.
230-
230-Notice:
230-- this server is likely to slow down your transfer rate if your FTP client
230-splits a file retrival into many small blocks (somes download accelerators
230-have this bad habbit, regardless of the ressource waste it means for the
230-server)
230-- if you want to link this ftp server, please use /mirror directory. Others
230-directories may move.
230-
230-Contact : ftpmaster@free.fr
230 Login successful.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> ls
200 PORT command successful. Consider using PASV.
150 Here comes the directory listing.

[/code]

Et ça reste bloqué sur la ligne “150 Here comes the directory listing.”.
Pourquoi à votre avis ?


#14

Et quand je sors de ce bloquage, j’ai :

[code]150 Here comes the directory listing.
ftp: accept: Interrupted system call

receive aborted
waiting for remote to finish abort
426 Failure writing network stream.
225 No transfer to ABOR.
[/code]


#15

Je ne comprends pas…

Lorsque je me connecte à ftp.free.fr ou sur mon espace perso ftp et que je sniffe, on voit bien le dialogue entre mon poste (sport : >1024) et le serveur FTP (dport : 21) puis du dialogue entre mon poste (sport : >1024) et le serveur DTP (dport : >1024).

Donc pourquoi sur le réseau derrière la passerelle, l’un passe et pas l’autre…

Personne n’a de piste ?? :cry:


#16

Si je ne m’abuse c’est le serveur FTP qui demande une connexion du DTP à mon poste ?


#17

je crois que c’est la difference entre passif et actif: si c’est actif, c’est le serveur qui demande, si c’est actif, c’est le client.
Je crois…


#18

Attends, jecrois que j’ai trouvé l’erreur : voici les snort de mes connections :

ftpperso.free.fr :
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:03.629665 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x4A
192.168.y.2:35919 -> 212.27.63.3:21 TCP TTL:63 TOS:0x0 ID:63297 IpLen:20 DgmLen:60 DF
*****S Seq: 0x6FCD8D0E Ack: 0x0 Win: 0x16D0 TcpLen: 40
TCP Options (5) => MSS: 1460 SackOK TS: 495221327 0 NOP WS: 0

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:03.678006 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x4A
212.27.63.3:21 -> 192.168.y.2:35919 TCP TTL:48 TOS:0x0 ID:0 IpLen:20 DgmLen:60 DF
AS Seq: 0xEE7F3C60 Ack: 0x6FCD8D0F Win: 0x16A0 TcpLen: 40
TCP Options (5) => MSS: 1460 SackOK TS: 2068031580 495221327
TCP Options => NOP WS: 2

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:03.678129 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35919 -> 212.27.63.3:21 TCP TTL:63 TOS:0x0 ID:63298 IpLen:20 DgmLen:52 DF
A* Seq: 0x6FCD8D0F Ack: 0xEE7F3C61 Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495221375 2068031580

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:03.727185 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x98
212.27.63.3:21 -> 192.168.y.2:35919 TCP TTL:48 TOS:0x0 ID:37894 IpLen:20 DgmLen:138 DF
AP Seq: 0xEE7F3C61 Ack: 0x6FCD8D0F Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068031592 495221375
32 32 30 20 53 65 72 76 65 75 72 20 64 65 20 6D 220 Serveur de m
69 73 65 20 61 20 6A 6F 75 72 20 64 65 73 20 70 ise a jour des p
61 67 65 73 20 70 65 72 73 6F 20 64 65 20 46 72 ages perso de Fr
65 65 2E 66 72 20 76 65 72 73 69 6F 6E 20 5B 4A ee.fr version [J
61 6E 20 33 30 20 32 30 30 36 20 31 37 3A 32 38 an 30 2006 17:28
3A 30 34 5D 0D 0A :04]…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:03.727311 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35919 -> 212.27.63.3:21 TCP TTL:63 TOS:0x10 ID:63299 IpLen:20 DgmLen:52 DF
A* Seq: 0x6FCD8D0F Ack: 0xEE7F3CB7 Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495221425 2068031592

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:10.697081 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x52
192.168.y.2:35919 -> 212.27.63.3:21 TCP TTL:63 TOS:0x10 ID:63300 IpLen:20 DgmLen:68 DF
AP Seq: 0x6FCD8D0F Ack: 0xEE7F3CB7 Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495228396 2068031592

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:10.742996 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x42
212.27.63.3:21 -> 192.168.y.2:35919 TCP TTL:48 TOS:0x0 ID:37895 IpLen:20 DgmLen:52 DF
A* Seq: 0xEE7F3CB7 Ack: 0x6FCD8D1F Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068033346 495228396

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:10.781525 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x68
212.27.63.3:21 -> 192.168.y.2:35919 TCP TTL:48 TOS:0x0 ID:37896 IpLen:20 DgmLen:90 DF
AP Seq: 0xEE7F3CB7 Ack: 0x6FCD8D1F Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068033355 495228396

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:10.781641 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35919 -> 212.27.63.3:21 TCP TTL:63 TOS:0x10 ID:63301 IpLen:20 DgmLen:52 DF
A* Seq: 0x6FCD8D1F Ack: 0xEE7F3CDD Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495228480 2068033355

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:14.568180 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x51
192.168.y.2:35919 -> 212.27.63.3:21 TCP TTL:63 TOS:0x10 ID:63302 IpLen:20 DgmLen:67 DF
AP Seq: 0x6FCD8D1F Ack: 0xEE7F3CDD Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495232267 2068033355

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:14.654678 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x42
212.27.63.3:21 -> 192.168.y.2:35919 TCP TTL:48 TOS:0x0 ID:37897 IpLen:20 DgmLen:52 DF
A* Seq: 0xEE7F3CDD Ack: 0x6FCD8D2E Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068034323 495232267

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:14.690742 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x61
212.27.63.3:21 -> 192.168.y.2:35919 TCP TTL:48 TOS:0x0 ID:37898 IpLen:20 DgmLen:83 DF
AP Seq: 0xEE7F3CDD Ack: 0x6FCD8D2E Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068034332 495232267

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:14.690869 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35919 -> 212.27.63.3:21 TCP TTL:63 TOS:0x10 ID:63303 IpLen:20 DgmLen:52 DF
A* Seq: 0x6FCD8D2E Ack: 0xEE7F3CFC Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495232390 2068034332

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:14.690883 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x48
192.168.y.2:35919 -> 212.27.63.3:21 TCP TTL:63 TOS:0x10 ID:63304 IpLen:20 DgmLen:58 DF
AP Seq: 0x6FCD8D2E Ack: 0xEE7F3CFC Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495232390 2068034332
53 59 53 54 0D 0A SYST…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:14.738462 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x42
212.27.63.3:21 -> 192.168.y.2:35919 TCP TTL:48 TOS:0x0 ID:37899 IpLen:20 DgmLen:52 DF
A* Seq: 0xEE7F3CFC Ack: 0x6FCD8D34 Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068034344 495232390

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:14.738950 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x55
212.27.63.3:21 -> 192.168.y.2:35919 TCP TTL:48 TOS:0x0 ID:37900 IpLen:20 DgmLen:71 DF
AP Seq: 0xEE7F3CFC Ack: 0x6FCD8D34 Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068034345 495232390
32 31 35 20 55 4E 49 58 20 54 79 70 65 3A 20 4C 215 UNIX Type: L
38 0D 0A 8…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:14.778325 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35919 -> 212.27.63.3:21 TCP TTL:63 TOS:0x10 ID:63305 IpLen:20 DgmLen:52 DF
A* Seq: 0x6FCD8D34 Ack: 0xEE7F3D0F Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495232478 2068034345

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:15.976052 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x5B
192.168.y.2:35919 -> 212.27.63.3:21 TCP TTL:63 TOS:0x10 ID:63306 IpLen:20 DgmLen:77 DF
AP Seq: 0x6FCD8D34 Ack: 0xEE7F3D0F Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495233675 2068034345
50 4F 52 54 20 31 39 32 2C 31 36 38 2C 35 2C 33 PORT 192,168,5,3
2C 31 34 30 2C 38 30 0D 0A ,140,80…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:16.024306 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x60
212.27.63.3:21 -> 192.168.y.2:35919 TCP TTL:48 TOS:0x0 ID:37901 IpLen:20 DgmLen:82 DF
AP Seq: 0xEE7F3D0F Ack: 0x6FCD8D4D Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068034666 495233675
32 30 30 20 50 4F 52 54 20 63 6F 6D 6D 61 6E 64 200 PORT command
20 73 75 63 63 65 73 73 66 75 6C 2E 0D 0A successful…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:16.024441 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35919 -> 212.27.63.3:21 TCP TTL:63 TOS:0x10 ID:63307 IpLen:20 DgmLen:52 DF
A* Seq: 0x6FCD8D4D Ack: 0xEE7F3D2D Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495233724 2068034666

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:16.024455 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x48
192.168.y.2:35919 -> 212.27.63.3:21 TCP TTL:63 TOS:0x10 ID:63308 IpLen:20 DgmLen:58 DF
AP Seq: 0x6FCD8D4D Ack: 0xEE7F3D2D Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495233724 2068034666
4C 49 53 54 0D 0A LIST…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:16.080031 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x4A
212.27.63.3:20 -> 192.168.y.2:35920 TCP TTL:48 TOS:0x0 ID:27635 IpLen:20 DgmLen:60 DF
*****S Seq: 0xEF3CDF8B Ack: 0x0 Win: 0x16D0 TcpLen: 40
TCP Options (5) => MSS: 1460 SackOK TS: 2068034680 0 NOP WS: 2

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:16.080160 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x4A
192.168.y.2:35920 -> 212.27.63.3:20 TCP TTL:63 TOS:0x0 ID:0 IpLen:20 DgmLen:60 DF
AS Seq: 0x70F00DAD Ack: 0xEF3CDF8C Win: 0x16A0 TcpLen: 40
TCP Options (5) => MSS: 1460 SackOK TS: 495233780 2068034680
TCP Options => NOP WS: 0

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:16.121624 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x42
212.27.63.3:21 -> 192.168.y.2:35919 TCP TTL:48 TOS:0x0 ID:37902 IpLen:20 DgmLen:52 DF
A* Seq: 0xEE7F3D2D Ack: 0x6FCD8D53 Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068034690 495233724

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:16.129181 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x42
212.27.63.3:20 -> 192.168.y.2:35920 TCP TTL:48 TOS:0x0 ID:27636 IpLen:20 DgmLen:52 DF
A* Seq: 0xEF3CDF8C Ack: 0x70F00DAE Win: 0x5B4 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068034692 495233780

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:16.387648 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x78
212.27.63.3:21 -> 192.168.y.2:35919 TCP TTL:48 TOS:0x0 ID:37903 IpLen:20 DgmLen:106 DF
AP Seq: 0xEE7F3D2D Ack: 0x6FCD8D53 Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068034756 495233724
31 35 30 20 4F 70 65 6E 69 6E 67 20 41 53 43 49 150 Opening ASCI
49 20 6D 6F 64 65 20 64 61 74 61 20 63 6F 6E 6E I mode data conn
65 63 74 69 6F 6E 20 66 6F 72 20 66 69 6C 65 20 ection for file
6C 69 73 74 0D 0A list…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:16.389629 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x1B3
212.27.63.3:20 -> 192.168.y.2:35920 TCP TTL:48 TOS:0x0 ID:27637 IpLen:20 DgmLen:421 DF
AP Seq: 0xEF3CDF8C Ack: 0x70F00DAE Win: 0x5B4 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068034756 495233780

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:16.389724 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x42
212.27.63.3:20 -> 192.168.y.2:35920 TCP TTL:48 TOS:0x0 ID:27638 IpLen:20 DgmLen:52 DF
***A***F Seq: 0xEF3CE0FD Ack: 0x70F00DAE Win: 0x5B4 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068034757 495233780

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:16.389805 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35920 -> 212.27.63.3:20 TCP TTL:63 TOS:0x8 ID:42635 IpLen:20 DgmLen:52 DF
A* Seq: 0x70F00DAE Ack: 0xEF3CE0FD Win: 0x1920 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495234089 2068034756

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:16.389891 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35920 -> 212.27.63.3:20 TCP TTL:63 TOS:0x8 ID:42636 IpLen:20 DgmLen:52 DF
***A***F Seq: 0x70F00DAE Ack: 0xEF3CE0FE Win: 0x1920 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495234089 2068034757

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:16.427031 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35919 -> 212.27.63.3:21 TCP TTL:63 TOS:0x10 ID:63309 IpLen:20 DgmLen:52 DF
A* Seq: 0x6FCD8D53 Ack: 0xEE7F3D63 Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495234127 2068034756

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:16.441647 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x42
212.27.63.3:20 -> 192.168.y.2:35920 TCP TTL:48 TOS:0x0 ID:27639 IpLen:20 DgmLen:52 DF
A* Seq: 0xEF3CE0FE Ack: 0x70F00DAF Win: 0x5B4 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068034770 495234089

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:16.474114 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x8D
212.27.63.3:21 -> 192.168.y.2:35919 TCP TTL:48 TOS:0x0 ID:37904 IpLen:20 DgmLen:127 DF
AP Seq: 0xEE7F3D63 Ack: 0x6FCD8D53 Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068034778 495234127
32 32 36 2D 54 72 61 6E 73 66 65 72 20 63 6F 6D 226-Transfer com
70 6C 65 74 65 2E 0D 0A 32 32 36 20 51 75 6F 74 plete…226 Quot
61 73 3A 20 75 74 69 6C 69 73 61 74 69 6F 6E 20 as: utilisation
64 65 20 31 34 39 20 4D 6F 20 73 75 72 20 6C 65 de 149 Mo sur le
73 20 31 30 32 34 20 4D 6F 0D 0A s 1024 Mo…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:16.474233 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35919 -> 212.27.63.3:21 TCP TTL:63 TOS:0x10 ID:63310 IpLen:20 DgmLen:52 DF
A* Seq: 0x6FCD8D53 Ack: 0xEE7F3DAE Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495234174 2068034778

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:20.263306 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x48
192.168.y.2:35919 -> 212.27.63.3:21 TCP TTL:63 TOS:0x10 ID:63311 IpLen:20 DgmLen:58 DF
AP Seq: 0x6FCD8D53 Ack: 0xEE7F3DAE Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495237963 2068034778
50 41 53 56 0D 0A PASV…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:20.309003 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x42
212.27.63.3:21 -> 192.168.y.2:35919 TCP TTL:48 TOS:0x0 ID:37905 IpLen:20 DgmLen:52 DF
A* Seq: 0xEE7F3DAE Ack: 0x6FCD8D59 Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068035737 495237963

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:20.310022 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x73
212.27.63.3:21 -> 192.168.y.2:35919 TCP TTL:48 TOS:0x0 ID:37906 IpLen:20 DgmLen:101 DF
AP Seq: 0xEE7F3DAE Ack: 0x6FCD8D59 Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068035737 495237963
32 32 37 20 45 6E 74 65 72 69 6E 67 20 50 61 73 227 Entering Pas
73 69 76 65 20 4D 6F 64 65 20 28 32 31 32 2C 32 sive Mode (212,2
37 2C 36 33 2C 33 2C 32 32 30 2C 33 33 29 2E 0D 7,63,3,220,33)…
0A .

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:20.310152 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35919 -> 212.27.63.3:21 TCP TTL:63 TOS:0x10 ID:63312 IpLen:20 DgmLen:52 DF
A* Seq: 0x6FCD8D59 Ack: 0xEE7F3DDF Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495238010 2068035737

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:21.159032 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x5B
192.168.y.2:35919 -> 212.27.63.3:21 TCP TTL:63 TOS:0x10 ID:63313 IpLen:20 DgmLen:77 DF
AP Seq: 0x6FCD8D59 Ack: 0xEE7F3DDF Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495238859 2068035737
50 4F 52 54 20 31 39 32 2C 31 36 38 2C 35 2C 33 PORT 192,168,5,3
2C 31 34 30 2C 38 31 0D 0A ,140,81…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:21.206109 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x60
212.27.63.3:21 -> 192.168.y.2:35919 TCP TTL:48 TOS:0x0 ID:37907 IpLen:20 DgmLen:82 DF
AP Seq: 0xEE7F3DDF Ack: 0x6FCD8D72 Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068035961 495238859
32 30 30 20 50 4F 52 54 20 63 6F 6D 6D 61 6E 64 200 PORT command
20 73 75 63 63 65 73 73 66 75 6C 2E 0D 0A successful…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:21.206241 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35919 -> 212.27.63.3:21 TCP TTL:63 TOS:0x10 ID:63314 IpLen:20 DgmLen:52 DF
A* Seq: 0x6FCD8D72 Ack: 0xEE7F3DFD Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495238907 2068035961

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:21.206256 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x48
192.168.y.2:35919 -> 212.27.63.3:21 TCP TTL:63 TOS:0x10 ID:63315 IpLen:20 DgmLen:58 DF
AP Seq: 0x6FCD8D72 Ack: 0xEE7F3DFD Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495238907 2068035961
4C 49 53 54 0D 0A LIST…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:21.260061 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x4A
212.27.63.3:20 -> 192.168.y.2:35921 TCP TTL:48 TOS:0x0 ID:26608 IpLen:20 DgmLen:60 DF
*****S Seq: 0xEF3EDE77 Ack: 0x0 Win: 0x16D0 TcpLen: 40
TCP Options (5) => MSS: 1460 SackOK TS: 2068035975 0 NOP WS: 2

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:21.260250 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x4A
192.168.y.2:35921 -> 212.27.63.3:20 TCP TTL:63 TOS:0x0 ID:0 IpLen:20 DgmLen:60 DF
AS Seq: 0x71DBBD78 Ack: 0xEF3EDE78 Win: 0x16A0 TcpLen: 40
TCP Options (5) => MSS: 1460 SackOK TS: 495238961 2068035975
TCP Options => NOP WS: 0

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:21.294970 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x42
212.27.63.3:21 -> 192.168.y.2:35919 TCP TTL:48 TOS:0x0 ID:37908 IpLen:20 DgmLen:52 DF
A* Seq: 0xEE7F3DFD Ack: 0x6FCD8D78 Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068035983 495238907

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:21.315896 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x42
212.27.63.3:20 -> 192.168.y.2:35921 TCP TTL:48 TOS:0x0 ID:26609 IpLen:20 DgmLen:52 DF
A* Seq: 0xEF3EDE78 Ack: 0x71DBBD79 Win: 0x5B4 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068035988 495238961

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:21.318635 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x42
212.27.63.3:20 -> 192.168.y.2:35921 TCP TTL:48 TOS:0x0 ID:26611 IpLen:20 DgmLen:52 DF
***A***F Seq: 0xEF3EDFE9 Ack: 0x71DBBD79 Win: 0x5B4 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068035989 495238961

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:21.318736 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x4E
192.168.y.2:35921 -> 212.27.63.3:20 TCP TTL:63 TOS:0x0 ID:529 IpLen:20 DgmLen:64 DF
A* Seq: 0x71DBBD79 Ack: 0xEF3EDE78 Win: 0x16A0 TcpLen: 44
TCP Options (6) => NOP NOP TS: 495239019 2068035988 NOP NOP Sack: 61246@57321

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:21.319583 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x1B3
212.27.63.3:20 -> 192.168.y.2:35921 TCP TTL:48 TOS:0x0 ID:26610 IpLen:20 DgmLen:421 DF
AP Seq: 0xEF3EDE78 Ack: 0x71DBBD79 Win: 0x5B4 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068035989 495238961

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:21.319746 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35921 -> 212.27.63.3:20 TCP TTL:63 TOS:0x0 ID:530 IpLen:20 DgmLen:52 DF
A* Seq: 0x71DBBD79 Ack: 0xEF3EDFEA Win: 0x1920 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495239020 2068035989

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:21.319801 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x78
212.27.63.3:21 -> 192.168.y.2:35919 TCP TTL:48 TOS:0x0 ID:37909 IpLen:20 DgmLen:106 DF
AP Seq: 0xEE7F3DFD Ack: 0x6FCD8D78 Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068035989 495238907
31 35 30 20 4F 70 65 6E 69 6E 67 20 41 53 43 49 150 Opening ASCI
49 20 6D 6F 64 65 20 64 61 74 61 20 63 6F 6E 6E I mode data conn
65 63 74 69 6F 6E 20 66 6F 72 20 66 69 6C 65 20 ection for file
6C 69 73 74 0D 0A list…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:21.320048 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35921 -> 212.27.63.3:20 TCP TTL:63 TOS:0x8 ID:531 IpLen:20 DgmLen:52 DF
***A***F Seq: 0x71DBBD79 Ack: 0xEF3EDFEA Win: 0x1920 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495239020 2068035989

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:21.359160 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35919 -> 212.27.63.3:21 TCP TTL:63 TOS:0x10 ID:63316 IpLen:20 DgmLen:52 DF
A* Seq: 0x6FCD8D78 Ack: 0xEE7F3E33 Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495239060 2068035989

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:21.365928 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x42
212.27.63.3:20 -> 192.168.y.2:35921 TCP TTL:48 TOS:0x0 ID:47367 IpLen:20 DgmLen:52 DF
A* Seq: 0xEF3EDFEA Ack: 0x71DBBD7A Win: 0x5B4 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068036001 495239020

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:21.406069 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x8D
212.27.63.3:21 -> 192.168.y.2:35919 TCP TTL:48 TOS:0x0 ID:37910 IpLen:20 DgmLen:127 DF
AP Seq: 0xEE7F3E33 Ack: 0x6FCD8D78 Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068036011 495239060
32 32 36 2D 54 72 61 6E 73 66 65 72 20 63 6F 6D 226-Transfer com
70 6C 65 74 65 2E 0D 0A 32 32 36 20 51 75 6F 74 plete…226 Quot
61 73 3A 20 75 74 69 6C 69 73 61 74 69 6F 6E 20 as: utilisation
64 65 20 31 34 39 20 4D 6F 20 73 75 72 20 6C 65 de 149 Mo sur le
73 20 31 30 32 34 20 4D 6F 0D 0A s 1024 Mo…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:21.406184 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35919 -> 212.27.63.3:21 TCP TTL:63 TOS:0x10 ID:63317 IpLen:20 DgmLen:52 DF
A* Seq: 0x6FCD8D78 Ack: 0xEE7F3E7E Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495239107 2068036011

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:22.806857 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x48
192.168.y.2:35919 -> 212.27.63.3:21 TCP TTL:63 TOS:0x10 ID:63318 IpLen:20 DgmLen:58 DF
AP Seq: 0x6FCD8D78 Ack: 0xEE7F3E7E Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495240507 2068036011
51 55 49 54 0D 0A QUIT…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:22.862911 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x42
212.27.63.3:21 -> 192.168.y.2:35919 TCP TTL:48 TOS:0x0 ID:37911 IpLen:20 DgmLen:52 DF
A* Seq: 0xEE7F3E7E Ack: 0x6FCD8D7E Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068036375 495240507

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:22.864507 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x50
212.27.63.3:21 -> 192.168.y.2:35919 TCP TTL:48 TOS:0x0 ID:37912 IpLen:20 DgmLen:66 DF
AP Seq: 0xEE7F3E7E Ack: 0x6FCD8D7E Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068036375 495240507
32 32 31 20 47 6F 6F 64 62 79 65 2E 0D 0A 221 Goodbye…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:22.864611 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35919 -> 212.27.63.3:21 TCP TTL:63 TOS:0x10 ID:63319 IpLen:20 DgmLen:52 DF
A* Seq: 0x6FCD8D7E Ack: 0xEE7F3E8C Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495240565 2068036375

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:22.864658 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x42
212.27.63.3:21 -> 192.168.y.2:35919 TCP TTL:48 TOS:0x0 ID:37913 IpLen:20 DgmLen:52 DF
***A***F Seq: 0xEE7F3E8C Ack: 0x6FCD8D7E Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068036375 495240507

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:22.864897 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35919 -> 212.27.63.3:21 TCP TTL:63 TOS:0x10 ID:63320 IpLen:20 DgmLen:52 DF
***A***F Seq: 0x6FCD8D7E Ack: 0xEE7F3E8D Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495240566 2068036375

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:22.919077 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x42
212.27.63.3:21 -> 192.168.y.2:35919 TCP TTL:48 TOS:0x0 ID:37914 IpLen:20 DgmLen:52 DF
A* Seq: 0xEE7F3E8D Ack: 0x6FCD8D7F Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068036389 495240566

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:22.923734 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x42
212.27.63.3:21 -> 192.168.y.2:35919 TCP TTL:48 TOS:0x0 ID:47422 IpLen:20 DgmLen:52 DF
A* Seq: 0xEE7F3E8D Ack: 0x6FCD8D7F Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2068036389 495240566

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:22.923842 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x36
192.168.y.2:35919 -> 212.27.63.3:21 TCP TTL:63 TOS:0x0 ID:17275 IpLen:20 DgmLen:40 DF
***R Seq: 0x6FCD8D7F Ack: 0x0 Win: 0x0 TcpLen: 20

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+


#19

ftp.free.fr :
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:27.651591 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x4A
192.168.y.2:35922 -> 213.228.0.141:21 TCP TTL:63 TOS:0x0 ID:53213 IpLen:20 DgmLen:60 DF
*****S Seq: 0x729317F4 Ack: 0x0 Win: 0x16D0 TcpLen: 40
TCP Options (5) => MSS: 1460 SackOK TS: 495245353 0 NOP WS: 0

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:27.699729 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x4A
213.228.0.141:21 -> 192.168.y.2:35922 TCP TTL:48 TOS:0x0 ID:0 IpLen:20 DgmLen:60 DF
AS Seq: 0x85AD868F Ack: 0x729317F5 Win: 0x16A0 TcpLen: 40
TCP Options (5) => MSS: 1460 SackOK TS: 105304302 495245353 NOP
TCP Options => WS: 2

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:27.699852 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35922 -> 213.228.0.141:21 TCP TTL:63 TOS:0x0 ID:53214 IpLen:20 DgmLen:52 DF
A* Seq: 0x729317F5 Ack: 0x85AD8690 Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495245401 105304302

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:27.749325 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x64
213.228.0.141:21 -> 192.168.y.2:35922 TCP TTL:48 TOS:0x0 ID:22414 IpLen:20 DgmLen:86 DF
AP Seq: 0x85AD8690 Ack: 0x729317F5 Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 105304352 495245401
32 32 30 20 57 65 6C 63 6F 6D 65 20 74 6F 20 50 220 Welcome to P
72 6F 58 61 64 20 46 54 50 20 73 65 72 76 65 72 roXad FTP server
0D 0A …

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:27.749442 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35922 -> 213.228.0.141:21 TCP TTL:63 TOS:0x10 ID:53215 IpLen:20 DgmLen:52 DF
A* Seq: 0x729317F5 Ack: 0x85AD86B2 Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495245451 105304352

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:30.645252 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x52
192.168.y.2:35922 -> 213.228.0.141:21 TCP TTL:63 TOS:0x10 ID:53216 IpLen:20 DgmLen:68 DF
AP Seq: 0x729317F5 Ack: 0x85AD86B2 Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495248347 105304352
55 53 45 52 20 61 6E 6F 6E 79 6D 6F 75 73 0D 0A USER anonymous…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:30.690777 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x42
213.228.0.141:21 -> 192.168.y.2:35922 TCP TTL:48 TOS:0x0 ID:22416 IpLen:20 DgmLen:52 DF
A* Seq: 0x85AD86B2 Ack: 0x72931805 Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 105307295 495248347

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:30.691014 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x64
213.228.0.141:21 -> 192.168.y.2:35922 TCP TTL:48 TOS:0x0 ID:22418 IpLen:20 DgmLen:86 DF
AP Seq: 0x85AD86B2 Ack: 0x72931805 Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 105307295 495248347
33 33 31 20 50 6C 65 61 73 65 20 73 70 65 63 69 331 Please speci
66 79 20 74 68 65 20 70 61 73 73 77 6F 72 64 2E fy the password.
0D 0A …

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:30.691130 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35922 -> 213.228.0.141:21 TCP TTL:63 TOS:0x10 ID:53217 IpLen:20 DgmLen:52 DF
A* Seq: 0x72931805 Ack: 0x85AD86D4 Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495248393 105307295

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:30.645252 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x52
192.168.y.2:35922 -> 213.228.0.141:21 TCP TTL:63 TOS:0x10 ID:53216 IpLen:20 DgmLen:68 DF
AP Seq: 0x729317F5 Ack: 0x85AD86B2 Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495248347 105304352
55 53 45 52 20 61 6E 6F 6E 79 6D 6F 75 73 0D 0A USER anonymous…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:30.690777 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x42
213.228.0.141:21 -> 192.168.y.2:35922 TCP TTL:48 TOS:0x0 ID:22416 IpLen:20 DgmLen:52 DF
A* Seq: 0x85AD86B2 Ack: 0x72931805 Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 105307295 495248347

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:30.691014 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x64
213.228.0.141:21 -> 192.168.y.2:35922 TCP TTL:48 TOS:0x0 ID:22418 IpLen:20 DgmLen:86 DF
AP Seq: 0x85AD86B2 Ack: 0x72931805 Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 105307295 495248347
33 33 31 20 50 6C 65 61 73 65 20 73 70 65 63 69 331 Please speci
66 79 20 74 68 65 20 70 61 73 73 77 6F 72 64 2E fy the password.
0D 0A …

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:30.691130 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35922 -> 213.228.0.141:21 TCP TTL:63 TOS:0x10 ID:53217 IpLen:20 DgmLen:52 DF
A* Seq: 0x72931805 Ack: 0x85AD86D4 Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495248393 105307295

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:30.997281 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x49
192.168.y.2:35922 -> 213.228.0.141:21 TCP TTL:63 TOS:0x10 ID:53218 IpLen:20 DgmLen:59 DF
AP Seq: 0x72931805 Ack: 0x85AD86D4 Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495248699 105307295
50 41 53 53 20 0D 0A PASS …

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:31.048724 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x74
213.228.0.141:21 -> 192.168.y.2:35922 TCP TTL:48 TOS:0x0 ID:22420 IpLen:20 DgmLen:102 DF
AP Seq: 0x85AD86D4 Ack: 0x7293180C Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 105307652 495248699
32 33 30 2D 57 65 6C 63 6F 6D 65 20 74 6F 20 46 230-Welcome to F
72 65 65 2E 66 72 2F 50 72 6F 58 61 64 2E 6E 65 ree.fr/ProXad.ne
74 20 6D 69 72 72 6F 72 20 73 65 72 76 65 72 2E t mirror server.
0D 0A …

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:31.048846 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35922 -> 213.228.0.141:21 TCP TTL:63 TOS:0x10 ID:53219 IpLen:20 DgmLen:52 DF
A* Seq: 0x7293180C Ack: 0x85AD8706 Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495248751 105307652

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:31.048868 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x48
213.228.0.141:21 -> 192.168.y.2:35922 TCP TTL:48 TOS:0x0 ID:22422 IpLen:20 DgmLen:58 DF
AP Seq: 0x85AD8706 Ack: 0x7293180C Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 105307652 495248699
32 33 30 2D 0D 0A 230-…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:31.048983 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35922 -> 213.228.0.141:21 TCP TTL:63 TOS:0x10 ID:53220 IpLen:20 DgmLen:52 DF
A* Seq: 0x7293180C Ack: 0x85AD870C Win: 0x16D0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495248751 105307652

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:31.049040 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x4F
213.228.0.141:21 -> 192.168.y.2:35922 TCP TTL:48 TOS:0x0 ID:22424 IpLen:20 DgmLen:65 DF
AP Seq: 0x85AD870C Ack: 0x7293180C Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 105307652 495248699
32 33 30 2D 4E 6F 74 69 63 65 3A 0D 0A 230-Notice:…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:31.074396 ARP who-has 192.168.5.253 tell 192.168.5.254

04/12-10:01:31.101137 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x1E7
213.228.0.141:21 -> 192.168.y.2:35922 TCP TTL:48 TOS:0x0 ID:22426 IpLen:20 DgmLen:473 DF
AP Seq: 0x85AD8719 Ack: 0x7293180C Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 105307702 495248751
32 33 30 2D 2D 20 74 68 69 73 20 73 65 72 76 65 230-- this serve
72 20 69 73 20 6C 69 6B 65 6C 79 20 74 6F 20 73 r is likely to s
6C 6F 77 20 64 6F 77 6E 20 79 6F 75 72 20 74 72 low down your tr
61 6E 73 66 65 72 20 72 61 74 65 20 69 66 20 79 ansfer rate if y
6F 75 72 20 46 54 50 20 63 6C 69 65 6E 74 0D 0A our FTP client…
32 33 30 2D 73 70 6C 69 74 73 20 61 20 66 69 6C 230-splits a fil
65 20 72 65 74 72 69 76 61 6C 20 69 6E 74 6F 20 e retrival into
6D 61 6E 79 20 73 6D 61 6C 6C 20 62 6C 6F 63 6B many small block
73 20 28 73 6F 6D 65 73 20 64 6F 77 6E 6C 6F 61 s (somes downloa
64 20 61 63 63 65 6C 65 72 61 74 6F 72 73 0D 0A d accelerators…
32 33 30 2D 68 61 76 65 20 74 68 69 73 20 62 61 230-have this ba
64 20 68 61 62 62 69 74 2C 20 72 65 67 61 72 64 d habbit, regard
6C 65 73 73 20 6F 66 20 74 68 65 20 72 65 73 73 less of the ress
6F 75 72 63 65 20 77 61 73 74 65 20 69 74 20 6D ource waste it m
65 61 6E 73 20 66 6F 72 20 74 68 65 0D 0A 32 33 eans for the…23
30 2D 73 65 72 76 65 72 29 0D 0A 32 33 30 2D 2D 0-server)…230–
20 69 66 20 79 6F 75 20 77 61 6E 74 20 74 6F 20 if you want to
6C 69 6E 6B 20 74 68 69 73 20 66 74 70 20 73 65 link this ftp se
72 76 65 72 2C 20 70 6C 65 61 73 65 20 75 73 65 rver, please use
20 2F 6D 69 72 72 6F 72 20 64 69 72 65 63 74 6F /mirror directo
72 79 2E 20 4F 74 68 65 72 73 0D 0A 32 33 30 2D ry. Others…230-
64 69 72 65 63 74 6F 72 69 65 73 20 6D 61 79 20 directories may
6D 6F 76 65 2E 0D 0A 32 33 30 2D 0D 0A 32 33 30 move…230-…230
2D 43 6F 6E 74 61 63 74 20 3A 20 66 74 70 6D 61 -Contact : ftpma
73 74 65 72 40 66 72 65 65 2E 66 72 0D 0A 32 33 ster@free.fr…23
30 20 4C 6F 67 69 6E 20 73 75 63 63 65 73 73 66 0 Login successf
75 6C 2E 0D 0A ul…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:31.101316 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35922 -> 213.228.0.141:21 TCP TTL:63 TOS:0x10 ID:53222 IpLen:20 DgmLen:52 DF
A* Seq: 0x7293180C Ack: 0x85AD88BE Win: 0x1920 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495248803 105307702

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:31.101390 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x48
192.168.y.2:35922 -> 213.228.0.141:21 TCP TTL:63 TOS:0x10 ID:53223 IpLen:20 DgmLen:58 DF
AP Seq: 0x7293180C Ack: 0x85AD88BE Win: 0x1920 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495248803 105307702
53 59 53 54 0D 0A SYST…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:31.147749 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x55
213.228.0.141:21 -> 192.168.y.2:35922 TCP TTL:48 TOS:0x0 ID:22428 IpLen:20 DgmLen:71 DF
AP Seq: 0x85AD88BE Ack: 0x72931812 Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 105307752 495248803
32 31 35 20 55 4E 49 58 20 54 79 70 65 3A 20 4C 215 UNIX Type: L
38 0D 0A 8…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:31.187420 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35922 -> 213.228.0.141:21 TCP TTL:63 TOS:0x10 ID:53224 IpLen:20 DgmLen:52 DF
A* Seq: 0x72931812 Ack: 0x85AD88D1 Win: 0x1920 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495248890 105307752

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:38.468227 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x5B
192.168.y.2:35922 -> 213.228.0.141:21 TCP TTL:63 TOS:0x10 ID:53225 IpLen:20 DgmLen:77 DF
AP Seq: 0x72931812 Ack: 0x85AD88D1 Win: 0x1920 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495256172 105307752
50 4F 52 54 20 31 39 32 2C 31 36 38 2C 35 2C 33 PORT 192,168,5,3
2C 31 34 30 2C 38 33 0D 0A ,140,83…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:38.515135 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x75
213.228.0.141:21 -> 192.168.y.2:35922 TCP TTL:48 TOS:0x0 ID:22430 IpLen:20 DgmLen:103 DF
AP Seq: 0x85AD88D1 Ack: 0x7293182B Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 105315121 495256172
32 30 30 20 50 4F 52 54 20 63 6F 6D 6D 61 6E 64 200 PORT command
20 73 75 63 63 65 73 73 66 75 6C 2E 20 43 6F 6E successful. Con
73 69 64 65 72 20 75 73 69 6E 67 20 50 41 53 56 sider using PASV
2E 0D 0A …

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:38.515277 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35922 -> 213.228.0.141:21 TCP TTL:63 TOS:0x10 ID:53226 IpLen:20 DgmLen:52 DF
A* Seq: 0x7293182B Ack: 0x85AD8904 Win: 0x1920 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495256219 105315121

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:38.515292 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x48
192.168.y.2:35922 -> 213.228.0.141:21 TCP TTL:63 TOS:0x10 ID:53227 IpLen:20 DgmLen:58 DF
AP Seq: 0x7293182B Ack: 0x85AD8904 Win: 0x1920 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495256219 105315121
4C 49 53 54 0D 0A LIST…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:38.563900 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x4A
213.228.0.141:50403 -> 192.168.y.2:35923 TCP TTL:48 TOS:0x0 ID:29301 IpLen:20 DgmLen:60 DF
*****S Seq: 0x868D8915 Ack: 0x0 Win: 0x16D0 TcpLen: 40
TCP Options (5) => MSS: 1460 SackOK TS: 105315168 0 NOP WS: 2

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:38.602813 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x42
213.228.0.141:21 -> 192.168.y.2:35922 TCP TTL:48 TOS:0x0 ID:22432 IpLen:20 DgmLen:52 DF
A* Seq: 0x85AD8904 Ack: 0x72931831 Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 105315208 495256219

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:39.365127 ARP who-has 192.168.5.253 tell 192.168.5.254

04/12-10:01:41.040689 ARP who-has 192.168.5.253 tell 192.168.5.254

04/12-10:01:41.562507 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x4A
213.228.0.141:50403 -> 192.168.y.2:35923 TCP TTL:48 TOS:0x0 ID:29303 IpLen:20 DgmLen:60 DF
*****S Seq: 0x868D8915 Ack: 0x0 Win: 0x16D0 TcpLen: 40
TCP Options (5) => MSS: 1460 SackOK TS: 105318168 0 NOP WS: 2

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:41.562563 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x36
192.168.y.2:35923 -> 213.228.0.141:50403 TCP TTL:64 TOS:0x0 ID:17 IpLen:20 DgmLen:40 DF
AR Seq: 0x0 Ack: 0x868D8916 Win: 0x0 TcpLen: 20

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:41.608983 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x69
213.228.0.141:21 -> 192.168.y.2:35922 TCP TTL:48 TOS:0x0 ID:22434 IpLen:20 DgmLen:91 DF
AP Seq: 0x85AD8904 Ack: 0x72931831 Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 105318215 495256219
31 35 30 20 48 65 72 65 20 63 6F 6D 65 73 20 74 150 Here comes t
68 65 20 64 69 72 65 63 74 6F 72 79 20 6C 69 73 he directory lis
74 69 6E 67 2E 0D 0A ting…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:41.611050 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x67
213.228.0.141:21 -> 192.168.y.2:35922 TCP TTL:48 TOS:0x0 ID:22436 IpLen:20 DgmLen:89 DF
AP Seq: 0x85AD892B Ack: 0x72931831 Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 105318215 495256219
34 32 36 20 46 61 69 6C 75 72 65 20 77 72 69 74 426 Failure writ
69 6E 67 20 6E 65 74 77 6F 72 6B 20 73 74 72 65 ing network stre
61 6D 2E 0D 0A am…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:41.648570 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35922 -> 213.228.0.141:21 TCP TTL:63 TOS:0x10 ID:53228 IpLen:20 DgmLen:52 DF
A* Seq: 0x72931831 Ack: 0x85AD8950 Win: 0x1920 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495259353 105318215

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:49.810151 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x45
192.168.y.2:35922 -> 213.228.0.141:21 TCP TTL:63 TOS:0x10 ID:53229 IpLen:20 DgmLen:55 DF
UAP* Seq: 0x72931831 Ack: 0x85AD8950 Win: 0x1920 TcpLen: 32 UrgPtr: 0x3
TCP Options (3) => NOP NOP TS: 495267515 105318215
FF F4 FF …

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:49.810162 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x49
192.168.y.2:35922 -> 213.228.0.141:21 TCP TTL:63 TOS:0x10 ID:53230 IpLen:20 DgmLen:59 DF
AP Seq: 0x72931834 Ack: 0x85AD8950 Win: 0x1920 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495267516 105318215
F2 41 42 4F 52 0D 0A .ABOR…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:49.857641 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x42
213.228.0.141:21 -> 192.168.y.2:35922 TCP TTL:48 TOS:0x0 ID:22438 IpLen:20 DgmLen:52 DF
A* Seq: 0x85AD8950 Ack: 0x72931834 Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 105326464 495267515

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:49.863620 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x42
213.228.0.141:21 -> 192.168.y.2:35922 TCP TTL:48 TOS:0x0 ID:22440 IpLen:20 DgmLen:52 DF
A* Seq: 0x85AD8950 Ack: 0x7293183B Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 105326468 495267516

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:49.863857 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x5C
213.228.0.141:21 -> 192.168.y.2:35922 TCP TTL:48 TOS:0x0 ID:22442 IpLen:20 DgmLen:78 DF
AP Seq: 0x85AD8950 Ack: 0x7293183B Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 105326468 495267516
32 32 35 20 4E 6F 20 74 72 61 6E 73 66 65 72 20 225 No transfer
74 6F 20 41 42 4F 52 2E 0D 0A to ABOR…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:49.863967 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35922 -> 213.228.0.141:21 TCP TTL:63 TOS:0x10 ID:53231 IpLen:20 DgmLen:52 DF
A* Seq: 0x7293183B Ack: 0x85AD896A Win: 0x1920 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495267569 105326468

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:54.449194 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x48
192.168.y.2:35922 -> 213.228.0.141:21 TCP TTL:63 TOS:0x10 ID:53232 IpLen:20 DgmLen:58 DF
AP Seq: 0x7293183B Ack: 0x85AD896A Win: 0x1920 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495272155 105326468
51 55 49 54 0D 0A QUIT…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:54.496001 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x50
213.228.0.141:21 -> 192.168.y.2:35922 TCP TTL:48 TOS:0x0 ID:22444 IpLen:20 DgmLen:66 DF
AP Seq: 0x85AD896A Ack: 0x72931841 Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 105331103 495272155
32 32 31 20 47 6F 6F 64 62 79 65 2E 0D 0A 221 Goodbye…

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:54.496114 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35922 -> 213.228.0.141:21 TCP TTL:63 TOS:0x10 ID:53233 IpLen:20 DgmLen:52 DF
A* Seq: 0x72931841 Ack: 0x85AD8978 Win: 0x1920 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495272202 105331103

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:54.496258 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x42
213.228.0.141:21 -> 192.168.y.2:35922 TCP TTL:48 TOS:0x0 ID:22446 IpLen:20 DgmLen:52 DF
***A***F Seq: 0x85AD8978 Ack: 0x72931841 Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 105331104 495272155

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:54.496404 0:3:47:CC:1B:6D -> 0:A0:F9:4:C1:3B type:0x800 len:0x42
192.168.y.2:35922 -> 213.228.0.141:21 TCP TTL:63 TOS:0x10 ID:53234 IpLen:20 DgmLen:52 DF
***A***F Seq: 0x72931841 Ack: 0x85AD8979 Win: 0x1920 TcpLen: 32
TCP Options (3) => NOP NOP TS: 495272203 105331104

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

04/12-10:01:54.544419 0:A0:F9:4:C1:3B -> 0:3:47:CC:1B:6D type:0x800 len:0x42
213.228.0.141:21 -> 192.168.y.2:35922 TCP TTL:48 TOS:0x0 ID:22448 IpLen:20 DgmLen:52 DF
A* Seq: 0x85AD8979 Ack: 0x72931842 Win: 0x5A8 TcpLen: 32
TCP Options (3) => NOP NOP TS: 105331151 495272203

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+


#20

[quote=“Badaboumpanpan”]Je ne comprends pas…

Lorsque je me connecte à ftp.free.fr ou sur mon espace perso ftp et que je sniffe, on voit bien le dialogue entre mon poste (sport : >1024) et le serveur FTP (dport : 21) puis du dialogue entre mon poste (sport : >1024) et le serveur DTP (dport : >1024).

Donc pourquoi sur le réseau derrière la passerelle, l’un passe et pas l’autre…

Personne n’a de piste ?? :cry:[/quote]

Comme quoi, un sniffe avec ethereal sur du XP ne vaut pas snort sous Debian… :laughing:

Je cherche un script à intégrer à mes régles iptables et je vous le propose. :slightly_smiling: