Port Values

Maybe this is a newbie question, but I can’t seem to find what I am looking for because I don’t know WHAT it really is. When looking at an FTP capture stream I noticed:

220 Microsoft FTP Service
USER UserName
331 Password required for UserName.
PASS password
230 User UserName logged in.
PORT 10,10,1,10,17,241

or

220 Microsoft FTP Service
USER UserName
331 Password required for UserName.
PASS password
230 User UserName logged in.
PORT 10,10,1,10,18,15

On the port line, I understand the first four comma values are the IP address, but what are the next two? What is this syntax and what should I be looking for? With different tests around the environments, they give different last two sets of numbers (first example was “,17,241” and second was “,18,15”) but I don’t even know where to begin lookin as to what this is and what it is telling me when trying to resolve problems. Are they even important?

Any help? Like I said, this may be a dumb question and maybe someone can point me straight to it.

Hello

Search for “ftp port command” on google or …

The 2 last numbers are the port :

  • 17,241 -> port = 17*256 + 241

Your ftp client is listening on this port, expecting the ftp server connection.

Look at http://www.securitypronews.com/it/networksystems/spn-21-20030917UnderstandingtheFTPPORTCommand.html for example

bye

Thanks wsgd

That link was exactly the explination i needed. Now i am understanding… uh… more. :wink: