Re: WE/IE FTP

Lovely... what's the correspondent IIS FTP log file indicating?
if you direct use IE, do you got the same behavior in sniffer log?

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


"Allen" <NOYB@xxxxxxxx> wrote in message
news:ucg2qZSuGHA.2036@xxxxxxxxxxxxxxxxxxxxxxx
Well first of all it's WE not IE, though WE does I believe use IE
engine/settings or such.

The way I know blank password being sent on first attempt is I used
snifffer to watch the traffic.
Also there are no attempts to login as 'anonymous'. So that's not even in
the picture.

No. Time Source Destination Protocol
Info
Connect:
1 0.000000 <CLIENT> <SERVER> TCP 2894 > 21
[SYN] Seq=4089064229 Ack=0 Win=64240 Len=0 MSS=1460
2 0.116001 <SERVER> <CLIENT> TCP 21 > 2894
[SYN, ACK] Seq=2379666828 Ack=4089064230 Win=5840 Len=0 MSS=1460
3 0.116034 <CLIENT> <SERVER> TCP 2894 > 21
[ACK] Seq=4089064230 Ack=2379666829 Win=64240 Len=0

First Login Attempt
4 16.236439 <SERVER> <CLIENT> FTP Response:
220 <ftp.isp.net>
5 16.236573 <CLIENT> <SERVER> FTP Request:
USER <USER ID>
6 16.352338 <SERVER> <CLIENT> TCP 21 > 2894
[ACK] Seq=2379666856 Ack=4089064245 Win=5840 Len=0
7 16.355448 <SERVER> <CLIENT> FTP Response:
331 Password required for <USER ID>.

Blank Password Sent:
8 16.357648 <CLIENT> <SERVER> FTP Request:
PASS
9 16.506272 <SERVER> <CLIENT> TCP 21 > 2894
[ACK] Seq=2379666893 Ack=4089064252 Win=5840 Len=0
10 16.517560 <SERVER> <CLIENT> FTP Response:
530 Login incorrect.

11 16.517738 <CLIENT> <SERVER> TCP 2894 > 21
[FIN, ACK] Seq=4089064252 Ack=2379666915 Win=64154 Len=0
12 16.533357 <CLIENT> <SERVER> TCP 2895 > 21
[SYN] Seq=2817114375 Ack=0 Win=64240 Len=0 MSS=1460
13 16.633661 <SERVER> <CLIENT> TCP 21 > 2894
[FIN, ACK] Seq=2379666915 Ack=4089064253 Win=5840 Len=0
14 16.633712 <CLIENT> <SERVER> TCP 2894 > 21
[ACK] Seq=4089064253 Ack=2379666916 Win=64154 Len=0
15 16.650102 <SERVER> <CLIENT> TCP 21 > 2895
[SYN, ACK] Seq=2298200853 Ack=2817114376 Win=5840 Len=0 MSS=1460
16 16.650134 <CLIENT> <SERVER> TCP 2895 > 21
[ACK] Seq=2817114376 Ack=2298200854 Win=64240 Len=0

Second Login Attempt:
17 30.106776 <SERVER> <CLIENT> FTP Response:
220 <ftp.isp.net>
18 30.106909 <CLIENT> <SERVER> FTP Request:
USER <USER ID>
19 30.512334 <SERVER> <CLIENT> TCP 21 > 2895
[ACK] Seq=2298200881 Ack=2817114391 Win=5840 Len=0
20 30.512490 <SERVER> <CLIENT> FTP Response:
331 Password required for <USER ID>.

Correct Password Sent:
21 30.512609 <CLIENT> <SERVER> FTP Request:
PASS <PASSWORD>
22 30.663902 <SERVER> <CLIENT> TCP 21 > 2895
[ACK] Seq=2298200918 Ack=2817114405 Win=5840 Len=0
23 30.733681 <SERVER> <CLIENT> FTP [TCP
Previous segment lost] Response: 230 Quota: avail(78.0%)=7360358.0
used(22.0%)=2076826.0 limit=9437184.0 bytes
24 30.733719 <CLIENT> <SERVER> TCP 2895 > 21
[ACK] Seq=2817114405 Ack=2298200918 Win=64176 Len=0 SLE=2298200948
SRE=2298201027
25 30.736733 <SERVER> <CLIENT> FTP [TCP
Retransmission] Response: 230-User <USER ID> logged in.

26 30.736778 <CLIENT> <SERVER> TCP 2895 > 21
[ACK] Seq=2817114405 Ack=2298201027 Win=64067 Len=0
27 30.736958 <CLIENT> <SERVER> FTP Request:
opts utf8 on
28 30.856052 <SERVER> <CLIENT> TCP 21 > 2895
[ACK] Seq=2298201027 Ack=2817114419 Win=5840 Len=0
29 30.859208 <SERVER> <CLIENT> FTP Response:
501 OPTS: utf8 not understood
30 30.859321 <CLIENT> <SERVER> FTP Request:
syst
31 30.973514 <SERVER> <CLIENT> FTP Response:
215 UNIX Type: L8
32 30.973693 <CLIENT> <SERVER> FTP Request:
site help
33 31.089610 <SERVER> <CLIENT> FTP [TCP
Previous segment lost] Response: HELP
34 31.089656 <CLIENT> <SERVER> TCP 2895 > 21
[ACK] Seq=2817114436 Ack=2298201077 Win=64017 Len=0 SLE=2298201149
SRE=2298201156
35 31.094466 <SERVER> <CLIENT> FTP [TCP
Retransmission] Response: 214-The following SITE commands are recognized
(* =>'s unimplemented).
36 31.094500 <CLIENT> <SERVER> TCP 2895 > 21
[ACK] Seq=2817114436 Ack=2298201156 Win=63938 Len=0
37 31.205421 <SERVER> <CLIENT> FTP Response:
CHGRP
38 31.205577 <CLIENT> <SERVER> FTP Request: PWD
39 31.319834 <SERVER> <CLIENT> FTP Response:
257 "/" is current directory.
40 31.419157 <CLIENT> <SERVER> TCP 2896 > 21
[SYN] Seq=3405431610 Ack=0 Win=64240 Len=0 MSS=1460
41 31.497332 <CLIENT> <SERVER> TCP 2895 > 21
[ACK] Seq=2817114441 Ack=2298201256 Win=63838 Len=0
42 31.533585 <SERVER> <CLIENT> TCP 21 > 2896
[SYN, ACK] Seq=2312840124 Ack=3405431611 Win=5840 Len=0 MSS=1460
43 31.533624 <CLIENT> <SERVER> TCP 2896 > 21
[ACK] Seq=3405431611 Ack=2312840125 Win=64240 Len=0

Login a Third Time:
44 39.644191 <SERVER> <CLIENT> FTP Response:
220 <ftp.isp.net>
45 39.644325 <CLIENT> <SERVER> FTP Request:
USER <USER ID>
46 39.760158 <SERVER> <CLIENT> TCP 21 > 2896
[ACK] Seq=2312840152 Ack=3405431626 Win=5840 Len=0

Correct Password Sent:
47 39.763321 <SERVER> <CLIENT> FTP Response:
331 Password required for <USER ID>.
48 39.763410 <CLIENT> <SERVER> FTP Request:
PASS <PASSWORD>
49 39.914153 <SERVER> <CLIENT> TCP 21 > 2896
[ACK] Seq=2312840189 Ack=3405431640 Win=5840 Len=0
50 39.917294 <SERVER> <CLIENT> FTP Response:
230-User <USER ID> logged in.

51 39.922254 <SERVER> <CLIENT> FTP Response:
230 Quota: avail(78.0%)=7360358.0 used(22.0%)=2076826.0 limit=9437184.0
bytes
52 39.922293 <CLIENT> <SERVER> TCP 2896 > 21
[ACK] Seq=3405431640 Ack=2312840298 Win=64067 Len=0
53 39.922468 <CLIENT> <SERVER> FTP Request:
opts utf8 on
54 40.041446 <SERVER> <CLIENT> TCP 21 > 2896
[ACK] Seq=2312840298 Ack=3405431654 Win=5840 Len=0

55 40.044604 <SERVER> <CLIENT> FTP Response:
501 OPTS: utf8 not understood
56 40.044736 <CLIENT> <SERVER> FTP Request:
syst
57 40.159281 <SERVER> <CLIENT> FTP Response:
215 UNIX Type: L8
58 40.159516 <CLIENT> <SERVER> FTP Request:
site help
59 40.275212 <SERVER> <CLIENT> FTP Response:
214-The following SITE commands are recognized (* =>'s unimplemented).
60 40.278478 <SERVER> <CLIENT> FTP Response:
HELP
61 40.278519 <CLIENT> <SERVER> TCP 2896 > 21
[ACK] Seq=3405431671 Ack=2312840427 Win=63938 Len=0
62 40.281733 <SERVER> <CLIENT> FTP Response:
CHGRP
63 40.396062 <SERVER> <CLIENT> FTP Response:
CHMOD
64 40.396107 <CLIENT> <SERVER> TCP 2896 > 21
[ACK] Seq=3405431671 Ack=2312840496 Win=63869 Len=0
65 40.396309 <CLIENT> <SERVER> FTP Request: PWD
66 40.513622 <SERVER> <CLIENT> FTP Response:
257 "/" is current directory.
67 40.517216 <CLIENT> <SERVER> FTP Request:
TYPE A
68 40.631340 <SERVER> <CLIENT> FTP Response:
200 Type set to A
69 40.633594 <CLIENT> <SERVER> FTP Request:
PORT 192,168,n,n,11,81
70 40.750654 <SERVER> <CLIENT> FTP Response:
200 PORT command successful

71 40.750782 <CLIENT> <SERVER> FTP Request:
LIST
72 40.866424 <SERVER> <CLIENT> TCP 20 > 2897
[SYN] Seq=2313170694 Ack=0 Win=5840 Len=0 MSS=1460 TSV=1124007918 TSER=0
WS=0
73 40.866506 <CLIENT> <SERVER> TCP 2897 > 20
[SYN, ACK] Seq=1487317394 Ack=2313170695 Win=64240 Len=0 MSS=1460 WS=0
TSV=0 TSER=0
74 40.904518 <SERVER> <CLIENT> TCP 21 > 2896
[ACK] Seq=2312840575 Ack=3405431716 Win=5840 Len=0
75 40.982146 <SERVER> <CLIENT> TCP 20 > 2897
[ACK] Seq=2313170695 Ack=1487317395 Win=5840 Len=0 TSV=1124007929 TSER=0
76 40.987312 <SERVER> <CLIENT> FTP Response:
150 Opening ASCII mode data connection for file list
77 40.998661 <SERVER> <CLIENT> FTP-DATA [TCP
Previous segment lost] FTP Data: 144 bytes
78 40.998690 <CLIENT> <SERVER> TCP [TCP Dup ACK
73#1] 2897 > 20 [ACK] Seq=1487317395 Ack=2313170695 Win=64240 Len=0
TSV=486190 TSER=1124007929 SLE=2313171715 SRE=2313171860
79 41.037415 <SERVER> <CLIENT> FTP-DATA [TCP
Retransmission] FTP Data: 1020 bytes
80 41.037461 <CLIENT> <SERVER> TCP 2897 > 20
[ACK] Seq=1487317395 Ack=2313171860 Win=63076 Len=0 TSV=486191
TSER=1124007930
81 41.037577 <CLIENT> <SERVER> TCP 2897 > 20
[FIN, ACK] Seq=1487317395 Ack=2313171860 Win=63076 Len=0 TSV=486191
TSER=1124007930
82 41.111132 <CLIENT> <SERVER> TCP 2896 > 21
[ACK] Seq=3405431716 Ack=2312840629 Win=63736 Len=0
83 41.156302 <SERVER> <CLIENT> TCP 20 > 2897
[ACK] Seq=2313171860 Ack=1487317396 Win=5840 Len=0 TSV=1124007947
TSER=486191
84 41.159510 <SERVER> <CLIENT> FTP Response:
226-Transfer complete.
85 41.227596 <SERVER> <CLIENT> FTP Response:
226 Quota: avail(78.0%)=7360358.0 used(22.0%)=2076826.0 limit=9437184.0
bytes
86 41.227632 <CLIENT> <SERVER> TCP 2896 > 21
[ACK] Seq=3405431716 Ack=2312840732 Win=63633 Len=0

Disconnect:
87 52.305478 <CLIENT> <SERVER> TCP 2896 > 21
[FIN, ACK] Seq=3405431716 Ack=2312840732 Win=63633 Len=0
88 52.422028 <SERVER> <CLIENT> TCP 21 > 2896
[FIN, ACK] Seq=2312840732 Ack=3405431717 Win=5840 Len=0
89 52.422079 <CLIENT> <SERVER> TCP 2896 > 21
[ACK] Seq=3405431717 Ack=2312840733 Win=63633 Len=0


"Bernard Cheah [MVP]" <qbernard@xxxxxxxxxxxxxxxxxxx> wrote in message
news:Ors%231vRuGHA.1888@xxxxxxxxxxxxxxxxxxxxxxx
How do you know that IE is sending blank password?
If I remembered correctly, IE will login as anonymous first, then prompt
if that's not successful.
and this is client behavior......

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


"Allen" <NOYB@xxxxxxxx> wrote in message
news:OzKwe7KuGHA.4336@xxxxxxxxxxxxxxxxxxxxxxx
For FTP to my ISP (Verizon) provided web space I use Windows Explorer
(used to be affectionately referred to as file mangler (file manager)).
It works fine except for one little quirk. When establishing a
connection
it first attempts to login with my correct user name but a blank
password.
Due to this the first login attempt obviously fails, and there is about
15
to 30 second delay. Then on the second login attempt it adds the
password
and successfully logs in.

It's annoying having to wait that extra 15 to 30 seconds to establish a
connection.

Why does Windows Explorer first attempt with a blank password, and how
can
I get it to provide the correct password on the first attempt.

TIA






.

Relevant Pages

  • Re: WE/IE FTP
    ... Other that it works great for ftp ... twice with blank password then with correct password the third attempt. ... Also there are no attempts to login as 'anonymous'. ... 215 UNIX Type: L8 ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: WE/IE FTP
    ... If you have a decent ftp client, say wsftp pro or etc, it will auto send ... Bernard Cheah ... twice with blank password then with correct password the third attempt. ... Also there are no attempts to login as 'anonymous'. ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: WE/IE FTP
    ... twice with blank password then with correct password the third attempt. ... Also there are no attempts to login as 'anonymous'. ... 215 UNIX Type: L8 ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: WE/IE FTP
    ... I like using WE for ftp because it's a common Windows 'native' interface ... twice with blank password then with correct password the third attempt. ... Also there are no attempts to login as 'anonymous'. ... Response: 331 Password required for. ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: IIS 6.0 FTP
    ... Server port: 21. ... I doubt IIS FTP has such feature. ... next, general 530 error indicating login failed, that could due to ... clients are using an order entry program created in Microsoft access. ...
    (microsoft.public.inetserver.iis.ftp)