From owner-freebsd-isp Wed Aug 28 1:14: 6 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B69FC37B400 for ; Wed, 28 Aug 2002 01:14:03 -0700 (PDT) Received: from sixshooter.v6.thrupoint.net (sixshooter.v6.thrupoint.net [65.242.152.6]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1883F43E6A for ; Wed, 28 Aug 2002 01:14:03 -0700 (PDT) (envelope-from jpb@sixshooter.v6.thrupoint.net) Received: by sixshooter.v6.thrupoint.net (Postfix, from userid 1000) id 25D26107A3; Wed, 28 Aug 2002 04:14:02 -0400 (EDT) Date: Wed, 28 Aug 2002 04:14:02 -0400 From: Jim Brown To: isp@FreeBSD.ORG Subject: Re: ftpd woes Message-ID: <20020828081401.GA77042@sixshooter.v6.thrupoint.net> Mail-Followup-To: Jim Brown , isp@FreeBSD.ORG References: <000801c24de7$c93e4280$0c0aa8c0@admin> <20020827192216.GA25948@lummux.tchpc.tcd.ie> <005401c24e12$5bed9570$0c0aa8c0@admin> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <005401c24e12$5bed9570$0c0aa8c0@admin> User-Agent: Mutt/1.4i Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org * Jeremy Buckner [2002-08-27 17:41]: > Here is the tcpdump: > > 14:43:36.040256 silly.goofy.com.3733 > 66.219.239.81.ftp: S > 450009741:450009741(0) win 16384 (DF) > 14:43:36.040348 66.219.239.81.ftp > silly.goofy.com.3733: S > 550559400:550559400(0) ack 450009742 win 57344 > 14:43:36.040794 silly.goofy.com.3733 > 66.219.239.81.ftp: . ack 1 win 17520 > (DF) > 14:44:08.045457 silly.goofy.com.3733 > 66.219.239.81.ftp: F 1:1(0) ack 1 win > 17520 (DF) > 14:44:08.045532 66.219.239.81.ftp > silly.goofy.com.3733: . ack 2 win 58400 > (DF) > > After this it times out I guess.... > > Now honestly I can't make heads or tails of this stuff so I'm at your mercy. > > JB You can get more detail with the following: tcpdump -n -vv -x -X -s 1000 tcp -n don't resolve addresses -vv (or -vvv) more detail -x and -X print ascii and hex packet contents -s 1000 snaplength of packet dump First glace- the 3way handshake looks OK, but the server isn't sending banner info.... there is a 30 second delay between the lines 3 and 4. The client didn't get anything, so it is retranmitting its previous ACK. Check for a firewall or some other packet filtering proxy between you and the server... Also check that the ftpd process is actually running (after being started by inetd if needed) on the server.... HTH, jpb === To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message