buglet in FTP processing for 1.E7Vo2Cjyt39.pcap in slice 9

The FTP log file reports the size of the transferred items as 76 and 7 bytes,
while in the dialog they're actually reported in KB (apparently):

  150 Binary transfer started (76k).
  ....
  150 Binary transfer started (7k).

I'm not sure whether these are worth worrying about, though. Presumably
if the accompanying ftp-data connections were also in the trace, the
sizes would come from those (?).

    Vern

  150 Binary transfer started (7k).

Oops, I haven't seen FTP servers do that before. I'll fix it.

I'm not sure whether these are worth worrying about, though. Presumably
if the accompanying ftp-data connections were also in the trace, the
sizes would come from those (?).

I don't think the ftp base scripts pull data from that currently. That would make sense though. :slight_smile: One problem with it is that in cluster deployments it's very common for the data connections to not be analyzed appropriately (it only works if 2-tuple load balancing is taking place).

  .Seth