Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 28 Aug 2002 04:14:02 -0400
From:      Jim Brown <jpb@sixshooter.v6.thrupoint.net>
To:        isp@FreeBSD.ORG
Subject:   Re: ftpd woes
Message-ID:  <20020828081401.GA77042@sixshooter.v6.thrupoint.net>
In-Reply-To: <005401c24e12$5bed9570$0c0aa8c0@admin>
References:  <000801c24de7$c93e4280$0c0aa8c0@admin> <20020827192216.GA25948@lummux.tchpc.tcd.ie> <005401c24e12$5bed9570$0c0aa8c0@admin>

next in thread | previous in thread | raw e-mail | index | archive | help
* Jeremy Buckner <jeremy@cableaz.com> [2002-08-27 17:41]:
> Here is the tcpdump:
> 
> 14:43:36.040256 silly.goofy.com.3733 > 66.219.239.81.ftp: S
> 450009741:450009741(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
> 14:43:36.040348 66.219.239.81.ftp > silly.goofy.com.3733: S
> 550559400:550559400(0) ack 450009742 win 57344 <mss 1460>
> 14:43:36.040794 silly.goofy.com.3733 > 66.219.239.81.ftp: . ack 1 win 17520
> (DF)
> 14:44:08.045457 silly.goofy.com.3733 > 66.219.239.81.ftp: F 1:1(0) ack 1 win
> 17520 (DF)
> 14:44:08.045532 66.219.239.81.ftp > silly.goofy.com.3733: . ack 2 win 58400
> (DF)
> 
> After this it times out I guess....
> 
> Now honestly I can't make heads or tails of this stuff so I'm at your mercy.
> 
> JB


You can get more detail with the following:

tcpdump -n -vv -x -X  -s 1000 tcp

-n don't resolve addresses 
-vv (or -vvv) more detail
-x and -X  print ascii and hex packet contents

-s 1000  snaplength of packet dump



First glace- the 3way handshake looks OK, but the server isn't sending
banner info....  there is a  30 second delay between the lines 3 and 4.

The client didn't get anything, so it is retranmitting its previous ACK.

Check for a firewall or some other packet filtering proxy  between you and 
the server... Also check that the ftpd process is actually running (after
being started by inetd if needed) on the server....


HTH,
jpb
===



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020828081401.GA77042>