FTPS（FTP+SSL）
' o1 g* I+ s$ U; E, B
# J8 e) @# @) K) u7 F/ H ftps是一种多传输协议，相当于加密版的FTP。当你在FTP服务器上收发文件的时候，你面临两个风险。第一个风险是在上载文件的时候为文件加密。第二个风险是，这些文件在你等待接收方下载的时候将停留在FTP服务器上，这时你如何保证这些文件的安全。你的第二个选择(创建一个支持SSL的FTP服务器)能够让你的主机使用一个FTPS连接上载这些文件。这包括使用一个在FTP协议下面的SSL层加密控制和数据通道。一种替代FTPS的协议是安全文件传输协议(SFTP)。这个协议使用SSH文件传输协议加密从客户机到服务器的FTP连接。0 L, j( g6 g7 p& A6 z
7 U& @& ?8 M; d% @
8 j5 }" E( k Q) h: C4 C5 UFTPS是在安全套接层使用标准的FTP协议和指令的一种增强型TFP协议，为FTP协议和数据通道增加了SSL安全功能。FTPS也称作“FTP-SSL”和“FTP-over-SSL”。SSL是一个在客户机和具有SSL功能的服务器之间的安全连接中对数据进行加密和解密的协议。# e3 P/ |6 b5 G, p
, H" g9 X+ M5 S# x
# P0 C. j1 T2 b和sftp连接方法类似，在windows中可以使用FileZilla等传输软件来连接FTPS进行上传，下载文件，建立，删除目录等操作,在FileZilla连接时，有显式和隐式TLS/SSL连接之分，连接时也有指纹提示。
2 _4 V% l9 w4 K6 Z, @; C, C# z
3 |6 E2 r) a6 r; {" q3 @1 t( z! x 7 w/ W$ s0 d3 v E
) [% a: f+ g6 I安全：ftps ftp+ssl+ [$ s6 S: F% B2 B
# G! V# Z% c6 Q
准备工作：
& F" v: {2 J/ \4 K( I6 y+ d; K K$ ~6 m6 S9 ~" L; N( _( {! m7 c
准备一:关闭防火墙；
; g# F& i n% i" I7 V/ Y+ B3 a1 u$ Z7 B6 |. N- q
准备二：挂载光盘；
8 J+ c7 k& ^, Y8 C$ u: y9 D" G5 I1 w( |, T
准备三：构建本地yum服务器。6 F# W- \0 Y+ J; G S: S
, \0 @7 A3 z9 x
FTP+SSL配置详细过程:
8 p7 X/ x: w/ T0 n% p8 r# o6 [, B& ^! f" I0 l
①.安装配置FTP服务器和抓包工具：（ftp：192.168.101.210）
4 u( W4 K' A! ~' J+ O$ J3 x9 |" S9 ~
- l' g9 }4 ]! x* F; p[root@ftp ~]# yum list all |grep vsftpd
8 d9 |- f4 c$ J- C) c$ m3 J[root@ftp ~]# yum install -y vsftpd+ j9 `8 Q- F0 x; \
- o1 K6 v% x# w, N[root@ftp ~]# yum list all |grep wireshark
$ g: V5 x, x9 |4 E. V7 [4 ~8 n( o R6 `9 `; S$ F8 J
[root@ftp ~]# yum install -y wireshark. P% T* R9 ^& t- t
0 q! I6 o& _: D# A! E- v; Y4 n4 _
[root@ftp ~]# useradd user1
3 \, _6 s' |! f, R; @! `/ r[root@ftp ~]# echo "123" |passwd --stdin user1
$ s: @" _ j1 r, i! O3 p( o) s: t) N" _4 l4 z
[root@ftp ~]# service vsftpd start9 @3 e% @" z7 ]! B
3 T* g5 _; Z T8 O: Y/ R
Starting vsftpd for vsftpd: [ OK ]
% l+ N9 \- |( z5 P1 d1 v* ?. g( p2 @' C) K
; v$ `& U* }+ `# d- K1 Q) U4 d
[root@ftp ~]# tshark -ni eth0 -R "tcp.dstport eq 21"
$ b7 d2 H! {1 G7 w. o1 ], N
- O0 U2 E6 M+ J. e0 {
- P/ D8 w1 x! O7 G- z r
% f4 @# W, Y" O" L$ {②.配置本地CA证书服务器：
7 t: p, G9 q$ ]) Q' A7 O' j
+ Y# i1 I, |1 v+ k" l( C[root@ftp ~]# cd /etc/pki/, m' m! l8 K5 V* J
[root@ftp pki]# ll& ?. [5 C( B4 l% e; X$ C' I
[root@ftp pki]# vim tls/openssl.cnf
- r+ H; O' u- k45 dir = /etc/pki/CA
, M& w! @$ Z2 _88 countryName = optional+ }5 `. |/ T5 ]5 [7 q
4 i J$ n" U Y: J3 u89 stateOrProvinceName = optional; Y# E# V; Z! U6 N R! V2 x
( [2 P; R }+ I
90 organizationName = optional
" G% P1 J( Q5 e/ P# ]1 B; C& f* u1 w+ v- y7 y
[root@ftp pki]# cd CA/4 m) |$ @5 | W/ y1 [( r" R; Y4 {, r }
[root@ftp CA]# mkdir certs newcerts crl
" y v M2 C/ I. \+ ?: R[root@ftp CA]# touch index.txt serial- `% N( G; _ p! a
[root@ftp CA]# echo "01" >serial
7 U/ Y! ?2 K; {+ b
- s* ^) Z5 `/ ?[root@ftp CA]# ll" Y9 |6 z, s. ]3 ?9 {% z
[root@ftp CA]# openssl genrsa 1024 > private/cakey.pem0 @+ T' R% r8 o1 L L
* C' B8 w6 J1 f* [( ^" K
Generating RSA private key, 1024 bit long modulus
0 d# r# ^ J$ c: y4 ?7 d1 N7 ]0 W
" g3 a/ }! r2 C4 k% _...........++++++
: C, T' l$ z1 x+ H$ \....++++++
% }, C: a' y- J; |( Je is 65537 (0x10001)
# L7 [' M& t1 o9 t6 e3 [1 C6 g6 P" }! C H8 {( {: e
[root@ftp CA]# chmod 600 private/cakey.pem0 q. n4 k. I. S# l9 R
[root@ftp CA]# ll private/cakey.pem `% k- `% p! S3 P# T0 _4 L! e+ X$ O( F
-rw------- 1 root root 887 Feb 10 23:22 private/cakey.pem/ x, }. R a, i% t* y+ {
[root@ftp CA]# openssl req -new -x509 -key private/cakey.pem -out cacert.pem -days 3650/ B# D/ y3 I4 M8 o0 j
, R4 F3 J6 W% ?) H
You are about to be asked to enter information that will be incorporated7 j* q0 l8 }" G0 O1 k$ T( Q
$ ~9 O6 k$ J) R. o; O+ z! V' Yinto your certificate request.
5 K" w4 n( H, G8 u! P& k7 Q6 Q7 S2 w
What you are about to enter is what is called a Distinguished Name or a DN.6 \2 }. Q, A' J9 t- z
# W5 H2 c# U1 L* ]5 M, jThere are quite a few fields but you can leave some blank/ ~8 o" E/ j7 @- M, _
9 V/ M2 M- b5 D }/ p5 O9 N
For some fields there will be a default value,( V- ]$ b$ w( |
, B- y' }. o% w, |
If you enter '.', the field will be left blank.
9 U6 B) [$ I, h8 f; `7 t1 B6 S% m" Q' Y
-----
; x3 w5 k& t* x- K, h6 ECountry Name (2 letter code) [GB]:cn
1 W2 h* i8 w; ]) L, ~
s, j$ M4 {# X n+ A" b1 PState or Province Name (full name) [Berkshire]:henan- M! @( a0 b; @$ |' v5 \% w
9 s' P& C# N9 M& BLocality Name (eg, city) [Newbury]:zhengzhou
; U$ H S' w* i6 u( F6 o8 F6 M. Q n/ q8 r& F& z/ ^
Organization Name (eg, company) [My Company Ltd]:junjie
8 r1 _" L& o" U' F+ u
4 e$ G( v8 C" e6 Q1 KOrganizational Unit Name (eg, section) []:soft; V2 [$ U- v) [8 T" M
& v7 |8 H9 h0 R4 ~Common Name (eg, your name or your server's hostname) []:ca.junjie.com# X& `( N. t' Y: `8 @, {# @
: B6 Y5 ?( f- u" ?* A( M
Email Address []:junjie@junjie.com- P' b# v% M3 t3 z2 {6 M
[root@ftp CA]#ll
( R9 w- [* p3 B) \+ ?& t7 \③.为ftp服务器创建证书：
3 Q9 ^- _" g, y! ?# j! [5 y9 ^* W6 |
[root@ftp CA]# mkdir /etc/vsftpd/certs& X V; x8 k* G5 @0 v o6 G2 {
[root@ftp CA]# cd /etc/vsftpd/certs: g- N( J) `2 m7 l8 c! T* j
[root@ftp certs]# openssl genrsa 1024 >vsftpd.key$ `& \6 p& _+ [, v z& ]7 [
Generating RSA private key, 1024 bit long modulus/ o7 w- ^" s z' Q+ y6 Q
6 z' ]% z/ ~5 r0 m* G0 Y% o; w....++++++
$ V) _6 F- c! x...+++++++ b% V* y3 d, s
e is 65537 (0x10001)
; w' }2 _; i5 U b: ~, O
: a5 g; s! x+ i4 K[root@ftp certs]# openssl req -new -key vsftpd.key -out vsftpd.csr) J/ y$ c0 }8 F/ _" r T2 }# ?
% i* O" O7 f( p0 c6 M. \You are about to be asked to enter information that will be incorporated
% C+ k0 k: u, ^7 i/ d1 z( V$ X9 Y( h' k" V8 S! w
into your certificate request.
0 l% ]- c! V: Z) i+ e: H$ l" p
; y/ Q# n% F! s& A _* AWhat you are about to enter is what is called a Distinguished Name or a DN.8 j0 }9 } {( I6 b( L* o* R: n! q
# ?" X2 v4 s4 u. p `
There are quite a few fields but you can leave some blank; Y( w+ V9 s$ s; [1 G
" S; R6 l w8 A- L7 w$ oFor some fields there will be a default value,
" D$ Q+ O1 }8 }. w& q- l1 H+ S8 ?2 Y+ A6 X
If you enter '.', the field will be left blank.0 U5 Z: w0 z5 D5 S. E0 v0 r
; V& H- E7 C5 S-----$ J! w6 }$ |1 L9 ?* F! h5 E
Country Name (2 letter code) [GB]:cn1 f; l5 p: V: m! d% d( z5 C
$ n: A& t$ p9 i6 J8 @0 c. W! j* eState or Province Name (full name) [Berkshire]:henan. p3 O4 ~9 q0 `
2 M' A) u* H' {: E4 i- z. e
Locality Name (eg, city) [Newbury]:zhengzhou
7 [# j2 @# s/ {9 n
9 M- O6 J* j* W6 gOrganization Name (eg, company) [My Company Ltd]:junjie
2 e% [3 b$ }( v5 C0 e
3 N0 o7 y5 K% h" f0 u n+ GOrganizational Unit Name (eg, section) []:ftp% n( ?2 n: Z3 Q- Q9 z
8 k" _% O+ M# `2 l
Common Name (eg, your name or your server's hostname) []:ftp.junjie.com# X6 S( `9 x- t' @% m# N8 L
+ {) V! a$ B$ G" q; sEmail Address []:ftp@junjie.com
3 b: h. d& Y+ m$ ]) U
. K7 s& W1 }3 J' x& J4 CPlease enter the following 'extra' attributes
3 @" i: y* Z4 B8 c$ _( e- A6 s+ E; h: s r# M) v
to be sent with your certificate request
+ q% u0 v: Y9 i( `% D' L, Q( ~% D+ f
A challenge password []:$ Z% J1 f" c* X9 Q+ V# D
$ b- R5 k0 ^7 h5 ~An optional company name []:( z, c% A" \& M* g% \! T
. ?% y( `/ o' \1 E4 E[root@ftp certs]# openssl ca -in vsftpd.csr -out vsftpd.crt$ k9 \ h; w) \/ s& K$ ~
Using configuration from /etc/pki/tls/openssl.cnf4 d, C' B4 D6 t; O# s: {% i
4 M9 T) O5 ~3 h, l1 B: U9 JCheck that the request matches the signature. p; |( s/ c ?
0 a! C. b0 S3 O/ o$ Y
Signature ok
: E! ?; \; e2 j: e! nCertificate Details:$ |6 H# Z3 D1 [, c: ]+ D" G4 J
; z! T" L$ O( V1 ]7 Y& o. G: a Serial Number: 1 (0x1)
- L0 P* ~9 t: {' [; a$ C0 m* H1 b4 [ Validity3 s8 F" F0 Y! P4 h& U+ o
Not Before: Feb 10 15:48:55 2012 GMT
* G& W# x5 N* f5 }3 _1 p7 }7 D' I+ B. o; S0 L
Not After : Feb 9 15:48:55 2013 GMT
! E- @* j D% } k7 c6 V, F( D, p Subject:; ]9 f4 g7 Y5 J/ z$ B$ k
countryName = cn4 R7 {7 {6 h0 {; f/ Y4 k. A
stateOrProvinceName = henan0 E5 ^# o9 v. V, y" N7 d9 V
organizationName = junjie# G1 h& m) Q @3 \3 c& A K- g: R% |
organizationalUnitName = ftp, y- ?$ X: `2 e7 A6 m1 C8 m
commonName = ftp.junjie.com; i+ a; R( v) e( N6 N2 r! [7 x) Y
emailAddress = junjie@junjie.com
0 O4 G' `* T" R" c: \2 \ X509v3 extensions:
3 Z" ^& ]8 Z9 V) q @+ s' d X509v3 Basic Constraints:
) `8 S) D5 |- l% V( t( V# o5 ^ CA:FALSE
4 K6 C3 y3 P0 D5 } Netscape Comment:2 {% o4 f! R& R) S9 |
OpenSSL Generated Certificate
9 o+ N7 N1 d* ^4 P4 H" s! f" x% B X509v3 Subject Key Identifier:8 J5 ?, d% z7 n: o7 ], b
33:C5:01:33:A5:CF:42:9F:24:A9:0D:E9:41:8E:26:C3:1B:7B:18:11/ `1 a" R& \4 T, a+ j5 B5 A7 q9 E4 z
9 d2 }/ {( T$ ]) J. a X509v3 Authority Key Identifier:
8 i c2 F1 W }8 f2 O keyid:50 1:A8:0A:1F:B7:CD:49:94:69:E3:70:E9:AE:93:73:2C:94:66:AC4 Q) o# T5 s1 C3 @' o
6 ?5 m2 r% k0 Q& N+ \7 r, o! T
; e, r7 X+ d% H! I( h
Certificate is to be certified until Feb 9 15:48:55 2013 GMT (365 days)2 |( u4 a; [2 X4 j
- ^+ H1 R/ J g+ I6 K
Sign the certificate? [y/n]:y4 V6 O& u6 G, `
6 B! G3 ~3 p1 H( w; J( @5 B
g5 w0 }8 m* `% q7 s/ e * D7 T. ~ Z' {" Y
1 out of 1 certificate requests certified, commit? [y/n]y5 K4 D: J; y8 x7 ?; [: }; c: n& m
9 w3 U3 e/ y$ z* `2 a/ |# w
Write out database with 1 new entries0 @9 I2 Q% |1 Z0 P! }- ^- p
; u+ e: X! z9 N' d r% }$ Z
Data Base Updated0 Z4 Q3 R. I1 K" X; C. {* Z
[root@ftp certs]# ll* c$ E- R* `1 J" F: h: Y
[root@ftp certs]# chmod 600 *) N2 o3 J7 a! {5 f% {+ N [7 [
[root@ftp certs]# ll2 S5 R0 K/ d; p ~* Z
④.使ftp服务应用证书：
1 N7 U! e5 J* H# H$ d: X7 F9 z
3 z( I8 @* C8 n( p. X* ~[root@ftp certs]# cd /etc/vsftpd/ . U, y7 Q7 g# |4 F9 |% J* H
[root@ftp vsftpd]# vim vsftpd.conf #增加以下内容
: x: A/ f% m) o+ x& Q118 rsa_cert_file=/etc/vsftpd/certs/vsftpd.crt
. k9 D+ C( }2 F( w! Z* m% p a# G
8 S: R. n% o) n$ ^9 a& B5 K- l119 rsa_private_key_file=/etc/vsftpd/certs/vsftpd.key
: P K8 s4 k3 W7 F4 Z7 a8 w( H! y5 g: L7 k( l
120 force_local_data_ssl=YES# e2 O+ W1 u+ d5 T5 g9 j7 l$ j
121 force_local_logins_ssl=YES
4 k+ B2 T6 A6 r+ {122 ssl_enable=YES
( Y8 z6 K3 [; O123 ssl_sslv2=YES( ~0 ?, c& ]% z
124 ssl_sslv3=YES) ]5 f0 R/ H2 t' R' l
125 ssl_tlsv1=YES$ C5 N+ ` Q6 ]" C& a5 Y
[root@ftp vsftpd]# service vsftpd restart" \, w( d; A% Q9 M3 {/ ]0 t
: m D' V1 M5 O( O& s
Shutting down vsftpd: [ OK ]
4 c% b1 K& |/ J5 CStarting vsftpd for vsftpd: [ OK ]
" }( R- g( J. D4 O: f⑤客户端测试（已加密传输）：
7 g2 M! ]: L _# Q! Z: ?$ ~: p- s6 l3 a" K$ m, f
, ]7 A) C. o. ?
4 U- ~5 _4 y& y* d2 y/ h
# t! e5 [" `# b& J
Q+ l7 h0 r1 a: m6 A从上面看出证书名称出现问题，但可是可以使用！选择接收一次！
' g+ ~" a: M3 \. ?
7 p: y" ?4 l6 W$ Z0 J: S5 R+ D) H3 N- ~! f' _
4 i$ r9 p* p2 s/ y3 ~
该次登录抓包内容如下所示：传输已经经过加密！
& B ?. A v1 x. u S. E m+ p[root@ftp ~]# tshark -ni eth0 -R "tcp.dstport eq 21"
$ Z% o, D* T! [9 y) c4 s! L+ Q' j# K% G; a$ c
n/ M) g$ a2 y+ C' p) Z- ?* Q+ J8 V( g1 I3 [' d" {
[root@ftp ~]# tshark -ni eth0 -R "tcp.dstport eq 21"
6 w t) B8 j% s% ^3 s i2 _& P8 Y- {6 z8 {3 \' M/ P, t
Running as user "root" and group "root". This could be dangerous.9 n9 g9 P% \1 @0 ]3 E1 b& m" M
2 f& F c7 \$ BCapturing on eth0
, T8 L! @* j y0 o9 i$ F
! K# \7 Z" V2 F `& H/ z9 X6 D/ w. ? 9.742109 192.168.101.113 -> 192.168.101.210 TCP 52572 > 21 [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=2
' Q, Q) X: I$ v4 H- s( a& S: w0 t
9.742144 192.168.101.113 -> 192.168.101.210 TCP 52572 > 21 [ACK] Seq=1 Ack=1 Win=65700 Len=0
/ X! |; V! U0 ]- o' [! W$ S
' |, e `& P/ m5 N 9.747458 192.168.101.113 -> 192.168.101.210 FTP Request: AUTH SSL
' a5 H. I. J" C4 a2 b1 f0 t* B: f7 F' I( G
9.755605 192.168.101.113 -> 192.168.101.210 FTP Request: \200\310\001\003\001\000\237\000\000\000 \000\300\024\000\3001 j- b3 D3 i5 p1 F! Z& x. m) T! s
- D- `8 `% M' V1 J 9.758795 192.168.101.113 -> 192.168.101.210 FTP Request: \026\003\001\000\206\020\000\000\202\000\200n\257\315\204\324o
( `* u$ k- q" x4 h& p7 D* p% e; v ?# V2 T1 f
9.778662 192.168.101.113 -> 192.168.101.210 FTP Request: \027\003\001\000\030\215\325t\357\277\001\376FZ\243D\373\003\367\231\207Q\324\003Q}/\335\025\027\003\001\000 \f\355b\270\355\325\020[\372\302s{^\375\307\364C\307\243\251v9\370\364\260\277\253\317\321gB]
9 n. r0 z, M; j6 t7 b. g
1 A' Q, d8 _6 n' U \$ H% U' y) E 9.779885 192.168.101.113 -> 192.168.101.210 FTP Request: \027\003\001\000\030\324\000\267\312\0320\213\266y\311\025[\371\275?\254Y\257\024[\245vjM\027\003\001\000(\236\321\221Z\321Z(\316'\343.\235?\321=8\264b\270(j\336\231\210\265\207K\223A\037"\277\251\252t\252a`\374- n6 W" E2 i) W: ^
1 J# X3 U) t4 v3 E1 l' ^
9.782153 192.168.101.113 -> 192.168.101.210 FTP Request: \027\003\001\000\030\257d\313mXZT\356\2366\334q\223\017gt\371\232\207\226\325
/ h6 |- p& }" k9 ~+ ?2 w6 k4 B
) {. [8 W" ^: `0 w 9.793165 192.168.101.113 -> 192.168.101.210 FTP Request: \027\003\001\000\0301\020S\237\372\210\004N4\370\366\377\2213m\356\233w:\275)>@%\027\003\001\000 Y\032\275BM=3J\313\240\241\372Z\371@\335\262\252\240\235\021\345\271\305\223\211\020\340\332\323Q\251; ?; p* l0 \: q, f
- j& F% O: `% Y; t& u/ t 9.795630 192.168.101.113 -> 192.168.101.210 FTP Request: \027\003\001\000\030\302\016=LR\272\030{\034\277V\256]\230\247\363\355M\241\327U\207k\032\027\003\001\000 OYi\216=S\322\212)\271V\016\2519w\332f\213\222S\244\275M\316\025N\302:k\312b\331$ D0 m7 p2 X x- f6 y
0 p2 J" C; E8 Y; E+ Z* g, Y
9.796727 192.168.101.113 -> 192.168.101.210 TCP 52572 > 21 [ACK] Seq=741 Ack=1260 Win=64440 Len=0
6 I3 a% p3 l' C1 `; @9 C% P1 @8 e/ x4 V
9.797542 192.168.101.113 -> 192.168.101.210 TCP 52572 > 21 [ACK] Seq=741 Ack=1334 Win=64364 Len=0
- ~, C' ^) ?: k# }. Z' P, `
* l9 J H% C4 F2 F! Z 9.798327 192.168.101.113 -> 192.168.101.210 TCP 52572 > 21 [ACK] Seq=741 Ack=1408 Win=64292 Len=07 o. Q0 u9 R2 L7 u
/ l1 \, m3 s, q! u1 ^. M6 H 9.798775 192.168.101.113 -> 192.168.101.210 TCP 52572 > 21 [ACK] Seq=741 Ack=1482 Win=65700 Len=02 g# s4 K8 E5 y# Q+ {2 P
8 k; k) g5 o, ?' I- Y/ F% w
9.799387 192.168.101.113 -> 192.168.101.210 TCP 52572 > 21 [ACK] Seq=741 Ack=1564 Win=65616 Len=0
: ?6 r6 T5 v: z8 X) f
( B$ I0 o: v& D6 g {: ` 9.799910 192.168.101.113 -> 192.168.101.210 TCP 52572 > 21 [ACK] Seq=741 Ack=1638 Win=65544 Len=06 r5 U/ D) p* |; c! J! j
' J6 l. a) Y: e, V% u6 _5 c
9.805078 192.168.101.113 -> 192.168.101.210 FTP Request: \027\003\001\000\030G}\305\210\021s\244q\023k=\345R\232A\366B\360\202\320\361(x\344\027\003\001\000 \351W\350\377\362\2756\334\303\035+1l|{\304\277\224\326n\036d\213\217\b\216\023N\225\003a\274
! B3 t* G( x: I; @3 P- H) c& |/ F) X. E9 h* q( }$ I
9.810763 192.168.101.113 -> 192.168.101.210 FTP Request: \027\003\001\000\030\203\354F\302\253\205\212\355\334$\321=\303h\276\302\350\320.\346\223\337BG\027\003\001\000 73\027\372#\232
W" s0 m1 }: o: b: B
( |2 Y: v6 O/ I/ c! U 9.813350 192.168.101.113 -> 192.168.101.210 FTP Request: \027\003\001\000\030\203x`k\337RM\341w\022N\255|f\260U ?\354)A\301^\251\027\003\001\000 \031`\366\364He\030\266z)\373\265\237\261\3430\220\331\340Kv[\033\347\tXj\344\314\236\242! J" D& S% u+ l7 L$ ~. O8 R
( C4 \' y! U) ^ E. j8 C, z
9.814073 192.168.101.113 -> 192.168.101.210 FTP Request: \027\003\001\000\030\307\2126sY\a\237\034\321\277!j\320\213\235\032\277e\345\361E>|)\027\003\001\000 \256\304}:-\365\034\aD~\fk`]\314\b\207\365-\217\305\244
% d% I6 F+ _- w, g3 d* L& B& L: K% S3 j5 R! Y- D6 Z" T
9.838659 192.168.101.113 -> 192.168.101.210 FTP Request: \027\003\001\000\030\300\272t&\t(\262\243\361\210\263\343\326\261\017$\317V\002\354\325\271\250\366\027\003\001\000 \350F\305\360\363\365\033\274W\207M\006\216\255\016\365\205z\033\002\032B\345,\3712\034\377\327[\272P i, q: r- W- f7 i" C% t' A
4 T/ C" |0 I# w, u- b* w, d) e* J
9.851675 192.168.101.113 -> 192.168.101.210 TCP 52572 > 21 [ACK] Seq=1071 Ack=2041 Win=65140 Len=0/ y' y( x8 g" O* o1 j6 \ ]
7 J% I2 R4 Y" K
9.856073 192.168.101.113 -> 192.168.101.210 FTP Request: \027\003\001\000\030\f\357\000E/\372\333\247\016\344\315\345\346\271L\327\214CE0*i\316\332\027\003\001\000(8\220\341\316.*\234dM\235. Y, g' [, L5 @! {3 @3 Y% Z% d
: M$ m* F3 w0 H* W/ Q1 J 10.061779 192.168.101.113 -> 192.168.101.210 TCP 52572 > 21 [ACK] Seq=1145 Ack=2094 Win=65088 Len=0! m4 ~" i: L+ A
7 b' {7 S9 y+ V b) V- A
39.978110 192.168.101.113 -> 192.168.101.210 FTP Request: \027\003\001\000\030=\032\322\022\216B\025O\016\0344 y, }" h# H+ R! o
: F" G' Z5 o% }, N+ c3 v
39.980672 192.168.101.113 -> 192.168.101.210 TCP 52572 > 21 [FIN, ACK] Seq=1211 Ack=2139 Win=65040 Len=0% W1 |2 \' s" ]# y
8 ~4 a6 R6 C( D& ?. Y1 i0 C 39.980725 192.168.101.113 -> 192.168.101.210 TCP 52572 > 21 [RST, ACK] Seq=1212 Ack=2149 Win=0 Len=0, z& K6 {# V! f8 ~9 j+ K. a, A H
8 H0 b+ l1 i2 l( \6 T+ L7 ~2 D27 packets captured
8 R, L9 Y; @3 u h; r
! Y0 J3 g6 U& }& k+ t& _[root@ftp ~]# |
|华强北 电脑城 龙岗电子世界 龙华电脑城 pc4g.com
( 粤ICP备16039863号 )
发表于 2013-1-22 22:31:55