When the FTP client is connected to the FTP server, the Transport Layer protocol TCP created a reliable session. TCP is routinely used during a session to control datagram delivery, verify datagram arrival, and manage window size. For each exchange of data between the FTP client and FTP server, a new TCP session is started as shown in this WireShark screenshot:
1.Identify Three-way handshake packets and write them here?
2.Identify and list the graceful termination of communication between FTP client and server?
3. what is the port number of FTP protocol?
4. Identify the source and distention IP addresses?
![*WiFi [Wireshark 2.2.3 (v2.2.3-0-g57531cd))<br>Eile Edit View Go Capture Analyze Statistics Telephony Iools Internals Help<br>Q Q Q =<br>Expression. Clear Apply Save<br>Filter<br>Destination<br>66. 220. 9. 50<br>192.168.0. 6<br>66. 220. 9. 50<br>No.<br>Time<br>Source<br>192.168. 0. 6<br>Protocel<br>Length<br>66<br>66<br>Info<br>66<br>50977-21 [SYN] Seq=0 win=8192 Len=0 MSS=1460 WS=1 SACK PERM=1<br>21-50977 [SYN, ACK] Seq-0 Ack-1 win-8192 Len-0 MSS-1460 WS-256 SACK_PERM-1<br>50977-21 [ACK] seq-1 Ack-1 win-8192 Len-0<br>Response: 220 welcome to the most popular FTP hosting service! Save on hardware, software, hosting an<br>50977-21 [ACK] Seq-1 Ack-185 win-8008 Len-0<br>Request: USER<br>Response: 331 user name ok, need password.<br>50977-21 [ACK] Seq-18 Ack-219 win-7974 Len-0<br>Request: PASS<br>Response: 230 user<br>50977-21 [ACK] Seq-34 Ack-296 win-7897 Len-0<br>Request: QUIT<br>Response: 221 Bye<br>21-50977 [FIN, ACK] Seq=305 Ack-40 win-131328 Len=0<br>50977-21 [ACK] seq-40 Ack-306 win-7888 Len-0<br>50977-21 [FIN, ACK] seq-40 Ack-306 win=7888 Len-0<br>21-50977 [ACK] Seq-306 Ack-41 win-131328 Len-0<br>11<br>4.392104000<br>TCP<br>13<br>14<br>15<br>16<br>27<br>66. 220. 9. 50<br>192.168.0. 6<br>TCP<br>TCP<br>4.550383000<br>4.551425000<br>4.707715000<br>54<br>192.168.0.6<br>66. 220. 9. 50<br>66. 220. 9. 5O<br>66. 220. 9. 50<br>238<br>54<br>ETP<br>4.768504000<br>192.168.0.6<br>TCP<br>12.115825000<br>192.168.0. 6<br>71<br>FTP<br>28<br>12.273038000<br>66. 220. 9. 50<br>192.168.0.6<br>88<br>FTP<br>29<br>54<br>55<br>56<br>80<br>12. 326524000<br>17.595695000<br>17.780551000<br>17.823534000<br>66. 220. 9. 50<br>192.168.0. 6<br>192.168. 0. 6<br>66. 220. 9. 50<br>192.168.0.6<br>54<br>TCP<br>66. 220. 9. 50<br>70<br>FTP<br>logged on. Free service has restrictions and is slower.<br>192.168.0.6<br>131<br>54<br>FTP<br>66. 220. 9. 50<br>66. 220. 9. 50<br>TCP<br>24.722724000<br>192.168.0. 6<br>60<br>FTP<br>81<br>82<br>83<br>66. 220. 9. 50<br>66. 220. 9. 50<br>192.168. 0. 6<br>24. 880090000<br>192.168.0.6<br>192.168. 0.6<br>66. 220. 9. 50<br>66. 220. 9. 50<br>192.168.0.6<br>63<br>54<br>FTP<br>24.882612000<br>24.882732000<br>24. 883459000 192.168.0.6<br>25.063393000<br>TCP<br>54<br>TCP<br>84<br>54<br>84<br>54<br>TCP<br>85<br>66. 220. 9. 50<br>54<br>TCP<br>E Frame 81: 63 bytes on wire (504 bits), 63 bytes captured (504 bits) on interface 0<br>E Ethernet II, src: Bskybltd_d0:c2:44 (7c:4c:a5:d0:c2:44), Dst: Intelcor_80:58:c2 (60:6c:66:80:58:c2)<br>E Internet Protocol verston 4, src: 66. 220.9. 50, Dst: 192.168.0.6<br>a Transmission control Protocol, src Port: 21, Dst Port: 50977, seq: 296, Ack: 40, Len: 9<br>a File Transfer Protocol (FTP)<br>E 221 Bye\r\n<br>0000 50 6c 66 80<br>0010 00<br>0020 00 06 00<br>0030 02 01 af 61 00 00 32 32<br>58 C2 7c 4c<br>06. 40 00 77 06<br>Tf.x. L<br>as do c2 44 08 00 45 00<br>e4 04 42 de<br>c6 7f 1c a0 4c 91 e5 e3 50 18<br>31 20 42 79 65 od 0a<br>D..E.<br>1..0.w...B..2.<br>....!...L...P.<br>а. . 22 1 Вуе. .<br>32 có a<br>O Frame (frame), 63 bytes<br>Peckets: 89 Profile: Default<br>](https://s3.us-east-1.amazonaws.com/storage.unifolks.com/qimg-008/008_s3fxx50-3hm320k1.png)
Extracted text: *WiFi [Wireshark 2.2.3 (v2.2.3-0-g57531cd)) Eile Edit View Go Capture Analyze Statistics Telephony Iools Internals Help Q Q Q = Expression. Clear Apply Save Filter Destination 66. 220. 9. 50 192.168.0. 6 66. 220. 9. 50 No. Time Source 192.168. 0. 6 Protocel Length 66 66 Info 66 50977-21 [SYN] Seq=0 win=8192 Len=0 MSS=1460 WS=1 SACK PERM=1 21-50977 [SYN, ACK] Seq-0 Ack-1 win-8192 Len-0 MSS-1460 WS-256 SACK_PERM-1 50977-21 [ACK] seq-1 Ack-1 win-8192 Len-0 Response: 220 welcome to the most popular FTP hosting service! Save on hardware, software, hosting an 50977-21 [ACK] Seq-1 Ack-185 win-8008 Len-0 Request: USER Response: 331 user name ok, need password. 50977-21 [ACK] Seq-18 Ack-219 win-7974 Len-0 Request: PASS Response: 230 user 50977-21 [ACK] Seq-34 Ack-296 win-7897 Len-0 Request: QUIT Response: 221 Bye 21-50977 [FIN, ACK] Seq=305 Ack-40 win-131328 Len=0 50977-21 [ACK] seq-40 Ack-306 win-7888 Len-0 50977-21 [FIN, ACK] seq-40 Ack-306 win=7888 Len-0 21-50977 [ACK] Seq-306 Ack-41 win-131328 Len-0 11 4.392104000 TCP 13 14 15 16 27 66. 220. 9. 50 192.168.0. 6 TCP TCP 4.550383000 4.551425000 4.707715000 54 192.168.0.6 66. 220. 9. 50 66. 220. 9. 5O 66. 220. 9. 50 238 54 ETP 4.768504000 192.168.0.6 TCP 12.115825000 192.168.0. 6 71 FTP 28 12.273038000 66. 220. 9. 50 192.168.0.6 88 FTP 29 54 55 56 80 12. 326524000 17.595695000 17.780551000 17.823534000 66. 220. 9. 50 192.168.0. 6 192.168. 0. 6 66. 220. 9. 50 192.168.0.6 54 TCP 66. 220. 9. 50 70 FTP logged on. Free service has restrictions and is slower. 192.168.0.6 131 54 FTP 66. 220. 9. 50 66. 220. 9. 50 TCP 24.722724000 192.168.0. 6 60 FTP 81 82 83 66. 220. 9. 50 66. 220. 9. 50 192.168. 0. 6 24. 880090000 192.168.0.6 192.168. 0.6 66. 220. 9. 50 66. 220. 9. 50 192.168.0.6 63 54 FTP 24.882612000 24.882732000 24. 883459000 192.168.0.6 25.063393000 TCP 54 TCP 84 54 84 54 TCP 85 66. 220. 9. 50 54 TCP E Frame 81: 63 bytes on wire (504 bits), 63 bytes captured (504 bits) on interface 0 E Ethernet II, src: Bskybltd_d0:c2:44 (7c:4c:a5:d0:c2:44), Dst: Intelcor_80:58:c2 (60:6c:66:80:58:c2) E Internet Protocol verston 4, src: 66. 220.9. 50, Dst: 192.168.0.6 a Transmission control Protocol, src Port: 21, Dst Port: 50977, seq: 296, Ack: 40, Len: 9 a File Transfer Protocol (FTP) E 221 Bye\r\n 0000 50 6c 66 80 0010 00 0020 00 06 00 0030 02 01 af 61 00 00 32 32 58 C2 7c 4c 06. 40 00 77 06 Tf.x. L as do c2 44 08 00 45 00 e4 04 42 de c6 7f 1c a0 4c 91 e5 e3 50 18 31 20 42 79 65 od 0a D..E. 1..0.w...B..2. ....!...L...P. а. . 22 1 Вуе. . 32 có a O Frame (frame), 63 bytes Peckets: 89 Profile: Default