sylvar: (Buffyverse: Giles: Hmmm.)
2006-06-21 01:00 pm

I know just enough about tcpdump to frustrate myself...

On the off chance that someone will know what's going on here...

I'm trying to FTP a file to a server. At my console on helpdesk.tblc.org, I see this:

> ftp 128.222.117.50
Connected to 128.222.117.50.
[pause]
421 Service not available, remote server has closed connection


And here's what tcpdump sees:

tcpdump -vv makes really long output lines... )

So... anyone have any ideas what's going on here?
sylvar: (Breakfast Club: Brain)
2006-06-15 09:37 am
Entry tags:

I'm not an idiot! Hooray!

I was kind of scared to take a SANS quiz, but I ended up getting better than 80% and a perfect 100% on the TCP/IP and Hex Quizzes respectively. Okay, so I need to learn more about TCP, but that's still pretty good.

And I have the chutzpah to respectfully disagree with one true/false question. Servers DO use ephemeral ports, just not qua servers. How else would they connect to a DNS server to resolve hostnames for logging?

I'm still not sure whether I want to take the Mastering Packet Analysis workshop, but it feels good to know that I'd be able to keep up with it.

technorati tags:, , ,