don and g00n:
NGSsniff does not capture outgoing packets. it also makes some IDing entries into an FTP servers log.
view ascii mode:
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
ftp nessus org ?i%f
raccoon ns1 cis fed gov < ?i%d
P
220 ftp.nessus.org NcFTPd Server (licensed copy) ready.
331 Guest login ok, send your complete e-mail address as password.
230-You are user #1 of 50 simultaneous users allowed.
230-
230 Logged in anonymously.
501 Option not recognized.
215 UNIX Type: L8
211 Valid SITE commands are: HELP, CHMOD, QUOTA, BUFSIZE, RETRBUFSIZE, STORBUFS
IZE, SYMLINK, UMASK, UTIME.
257 "/" is cwd.
250 "/pub" is new cwd.
200 Type okay.
200 PORT command successful.
P
150 Opening ASCII mode data connection for /bin/ls.
drwxr-xr-x 2 ftpuser ftpusers 512 Mar 17 2002 filterrules
drwxrwxr-x 5 ftpuser ftpusers 512 Jun 19 2002 hlfl
drwxr-xr-x 4 ftpuser ftpusers 1024 Feb 5 23:29 nessus
drwxr-xr-x 3 ftpuser ftpusers 512 Sep 26 17:16 nessus-testing
drwxr-xr-x 2 ftpuser ftpusers 512 Aug 6 2002 nstreams
226 Listing completed.
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
call me crazy but this is something i dont like to see no matter how nice a job it does
