02-24-2013 06:24 PM - edited 03-11-2019 06:04 PM
1: 10:57:00.508091 64.103.236.62.61615 > 175.136.235.106.21: S 1175398786:1175398786(0) win 8192 <mss 1260,nop,wscale 0,nop,nop,sackOK>
2: 10:57:00.508228 175.136.235.106.21 > 64.103.236.62.61615: R 984819660:984819660(0) ack 1175398787 win 0
3: 10:57:01.126046 64.103.236.62.61615 > 175.136.235.106.21: S 3797552730:3797552730(0) win 8192 <mss 1260,nop,wscale 0,nop,nop,sackOK>
4: 10:57:01.126229 175.136.235.106.21 > 64.103.236.62.61615: R 155485827:155485827(0) ack 3797552731 win 0
5: 10:57:01.748038 64.103.236.62.61615 > 175.136.235.106.21: S 4284313987:4284313987(0) win 8192 <mss 1260,nop,nop,sackOK>
6: 10:57:01.748160 175.136.235.106.21 > 64.103.236.62.61615: R 92151577:92151577(0) ack 4284313988 win 0
6 packets shown
CBJ-HELANG-EXTFW01# sh cap capin
Hai All,
I got this packet capture on ASA when I'm trying to have a ftp connection with server from 33 segment to 5 segment. Cannot ftp anymore.
Could you give any suggestion resolution on this prob.
CBJ-HELANG-EXTFW01# sh cap capo
9 packets captured
1: 11:26:26.410547 192.168.33.100.45425 > 192.168.5.190.21: S
3020761277:3020761277(0) win 5840 <mss 1460,sackOK,timestamp 3322602607 0,nop,wscale 7>
2: 11:26:26.410653 192.168.5.190.21 > 192.168.33.100.45425: R 0:0(0) ack
3020761278 win 0 <==================================
3: 11:26:26.510563 192.168.5.190.21 > 192.168.33.100.45425: R 0:0(0) win
0
4: 11:27:02.755759 192.168.33.100.45429 > 192.168.5.190.21: S
3037988666:3037988666(0) win 5840 <mss 1460,sackOK,timestamp 3322638957 0,nop,wscale 7>
5: 11:27:02.755866 192.168.5.190.21 > 192.168.33.100.45429: R 0:0(0) ack
3037988667 win 0
6: 11:27:02.855790 192.168.5.190.21 > 192.168.33.100.45429: R 0:0(0) win
0
7: 11:27:35.897155 192.168.33.100.45434 > 192.168.5.190.21: S
3429700587:3429700587(0) win 5840 <mss 1460,sackOK,timestamp 3322672104 0,nop,wscale 7>
8: 11:27:35.897216 192.168.5.190.21 > 192.168.33.100.45434: R 0:0(0) ack
3429700588 win 0
9: 11:27:35.997232 192.168.5.190.21 > 192.168.33.100.45434: R 0:0(0) win
0
02-24-2013 07:47 PM
Looks like you just got the SYN packet hitting the interface.
Is the server reachable?
Can you telnet on port 21?
Can you ping the server?
Can you share the configuration on the firewall.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide