From owner-freebsd-pf@FreeBSD.ORG  Thu Jan  7 17:13:14 2010
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 0A5A61065698
	for <freebsd-pf@freebsd.org>; Thu,  7 Jan 2010 17:13:14 +0000 (UTC)
	(envelope-from gofdp-freebsd-pf@m.gmane.org)
Received: from lo.gmane.org (lo.gmane.org [80.91.229.12])
	by mx1.freebsd.org (Postfix) with ESMTP id B6D818FC08
	for <freebsd-pf@freebsd.org>; Thu,  7 Jan 2010 17:13:13 +0000 (UTC)
Received: from list by lo.gmane.org with local (Exim 4.50) id 1NSvv5-0005LN-6f
	for freebsd-pf@freebsd.org; Thu, 07 Jan 2010 18:13:11 +0100
Received: from 207.155.204.151.ptr.us.xo.net ([207.155.204.151])
	by main.gmane.org with esmtp (Gmexim 0.1 (Debian))
	id 1AlnuQ-0007hv-00
	for <freebsd-pf@freebsd.org>; Thu, 07 Jan 2010 18:13:11 +0100
Received: from atkin901 by 207.155.204.151.ptr.us.xo.net with local (Gmexim
	0.1 (Debian)) id 1AlnuQ-0007hv-00
	for <freebsd-pf@freebsd.org>; Thu, 07 Jan 2010 18:13:11 +0100
X-Injected-Via-Gmane: http://gmane.org/
To: freebsd-pf@freebsd.org
From: Mark Atkinson <atkin901@gmail.com>
Date: Thu, 07 Jan 2010 09:12:48 -0800
Lines: 23
Message-ID: <hi54mg$mks$1@ger.gmane.org>
References: <fc2243911001060809m5417b810vf2ed40c8a969fb5f@mail.gmail.com>	<7731938b1001060923n5de4b511of07b8c63cff4e011@mail.gmail.com>
	<fc2243911001061340l5fd75af5hc90e6cbd659d0d19@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Complaints-To: usenet@ger.gmane.org
X-Gmane-NNTP-Posting-Host: 207.155.204.151.ptr.us.xo.net
User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US;
	rv:1.9.1.5) Gecko/20100104 Thunderbird/3.0
In-Reply-To: <fc2243911001061340l5fd75af5hc90e6cbd659d0d19@mail.gmail.com>
Sender: news <news@ger.gmane.org>
Subject: Re: ftp problem
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Jan 2010 17:13:14 -0000

On 01/06/10 13:40, M. Keith Thompson wrote:
> 14:40:49.329499 IP vvv.zzz.226.92.50201>  xxx.yyy.15.125.ftp: P
> 80:105(25) ack 755 win 17680<nop,nop,timestamp 31342638 1102807193>
>          0x0000:  4500 004d 3160 0000 3406 26e0 a4eb e25c  E..M1`..4.&....\
>          0x0010:  97a6 0f7d c419 0015 1590 303f bf82 ad2d  ...}......0?...-
>          0x0020:  8018 4510 fbea 0000 0101 080a 01de 402e  ..E...........@.
>          .
>          .
> 14:40:49.498480 IP xxx.yyy.15.125.ftp>  vvv.zzz.226.92.50201: P
> 785:807(22) ack 105 win 33026<nop,nop,timestamp 1102807531 31342638>
>          0x0000:  4510 004a 5b38 4000 4006 b0fa 97a6 0f7d  E..J[8@.@......}
>          0x0010:  a4eb e25c 0015 c419 bf82 ad4b 1590 3058  ...\.......K..0X
>          0x0020:  8018 8102 67f6 0000 0101 080a 41bb 81eb  ....g.......A...
>          0x0030:  01de 402e 3232 3620 3134 206d 6174 6368  ..@.226.14.match
>          0x0040:  6573 2074 6f74 616c 0d0a                 es.total..

So this doesn't look like the result of a 'RETR' command, but maybe a 
'LIST'?   The transfer appears successful, and the following trace, 
despite the one side ignoring the 150 logout, appears to transfer 
successfully too.

I'm not seeing any problem in the trace, but the hp client complains 
after this transfer?