Join us 4-8 November in Vienna for SharkFest'24 EUROPE, the official Wireshark Developer and User Conference
Wireshark logo

Display Filter Reference: File Transfer Protocol (FTP)

Protocol field name: ftp

Versions: 1.0.0 to 4.4.1

Back to Display Filter Reference

Field name Description Type Versions
ftp-data.commandCommandCharacter string2.6.0 to 4.4.1
ftp-data.command-frameCommand frameFrame number2.6.0 to 4.4.1
ftp-data.current-working-directoryCurrent working directoryCharacter string2.6.0 to 4.4.1
ftp-data.setup-frameSetup frameFrame number2.6.0 to 4.4.1
ftp-data.setup-methodSetup methodCharacter string2.6.0 to 4.4.1
ftp.active.cipActive IP addressIPv4 address1.0.0 to 4.4.1
ftp.active.natActive IP NATBoolean1.0.0 to 4.4.1
ftp.active.portActive portUnsigned integer (16 bits)1.0.0 to 4.4.1
ftp.commandCommandCharacter string2.6.0 to 4.4.1
ftp.command-frameCommand frameFrame number2.6.0 to 4.4.1
ftp.command-response.bitrateResponse bitrateUnsigned integer (32 bits)2.6.0 to 4.4.1
ftp.command-response.bytesCommand response bytesUnsigned integer (32 bits)2.6.0 to 4.4.1
ftp.command-response.durationResponse durationUnsigned integer (32 bits)2.6.0 to 4.4.1
ftp.command-response.first-frame-numCommand response first frameFrame number2.6.0 to 4.4.1
ftp.command-response.framesCommand response framesUnsigned integer (32 bits)2.6.0 to 4.4.1
ftp.command-response.last-frame-numCommand response last frameFrame number2.6.0 to 4.4.1
ftp.current-working-directoryCurrent working directoryCharacter string2.6.0 to 4.4.1
ftp.eprt.afExtended active address familyUnsigned integer (8 bits)1.10.0 to 4.4.1
ftp.eprt.args_invalidEPRT arguments must have the form: ||||Label1.12.0 to 4.4.1
ftp.eprt.ipExtended active IP addressIPv4 address1.10.0 to 4.4.1
ftp.eprt.ipv6Extended active IPv6 addressIPv6 address1.10.0 to 4.4.1
ftp.eprt.portExtended active portUnsigned integer (16 bits)1.10.0 to 4.4.1
ftp.epsv.args_invalidEPSV arguments must have the form (||||)Label1.12.0 to 4.4.1
ftp.epsv.ipExtended passive IPv4 addressIPv4 address1.10.0 to 4.4.1
ftp.epsv.ipv6Extended passive IPv6 addressIPv6 address1.10.0 to 4.4.1
ftp.epsv.portExtended passive portUnsigned integer (16 bits)1.10.0 to 4.4.1
ftp.passive.ipPassive IP addressIPv4 address1.0.0 to 4.4.1
ftp.passive.natPassive IP NATBoolean1.0.0 to 4.4.1
ftp.passive.portPassive portUnsigned integer (16 bits)1.0.0 to 4.4.1
ftp.requestRequestBoolean1.0.0 to 4.4.1
ftp.request.argRequest argCharacter string1.0.0 to 4.4.1
ftp.request.commandRequest commandCharacter string1.0.0 to 4.4.1
ftp.responseResponseBoolean1.0.0 to 4.4.1
ftp.response.argResponse argCharacter string1.0.0 to 4.4.1
ftp.response.codeResponse codeUnsigned integer (32 bits)1.0.0 to 4.4.1
ftp.response.code.invalidInvalid response codeLabel2.4.0 to 4.4.1
ftp.response.pwd.invalidInvalid PWD responseLabel2.6.0 to 4.4.1
ftp.setup-frameSetup frameFrame number2.6.0 to 4.4.1