
266 ◾ Network Attacks and Defenses: A Hands-on Approach
7.7.7.2 Step 2: Connect to the FTP Server
and Sniff the Session Packets
From Host #1 and using LeapFTP, connect to the FTP server
running at Host #2. Then, using CommView sniffer, sniff the
session packets.
7.7.7.3 Step 3: Analyze the Passive FTP Session Packets
The following screenshots show the detailed contents of the
main packets of the Command and Data channels of the
Passive FTP session:
A. For the Command channel in the Passive FTP session:
1. The first packet (SYN packet) of the three-way hand-
shake of the Command channel in the Passive FTP
session:
2. The second packet (SY