Post a reply

Before posting, please read how to report bug or request support effectively.

Bug reports without an attached log file are usually useless.

Username

Subject

Message body

Font colour:

Font size:

[quote="baumlerd"]I am using the .NET Library to do SFTP transfer and during a PCI scan of logs they found that there was traffic going across FTP (port 21) but the program is only using SFTP (port 22).  In the log files it was found that when port 22 failed it was trying to access port 21 which is disable via the firewalls but they are concerned as the traffic is there at all.

I tried a connection thru the WinSCP gui with logging turned on and it shows that WinSCP is "Knocking FTP port" after a failed connect on port 22.

Is there a way to stop this functionality so that it does not try port 21 after a failed port 22 connection?

[code]. 2016-12-06 15:01:56.400 --------------------------------------------------------------------------
. 2016-12-06 15:01:56.400 WinSCP Version 5.9.3 (Build 7136) (OS 6.1.7601 Service Pack 1 - Windows 7 Professional)
. 2016-12-06 15:01:56.400 Configuration: HKCU\Software\Martin Prikryl\WinSCP 2\
. 2016-12-06 15:01:56.400 Log level: Debug 2
. 2016-12-06 15:01:56.400 Local account: XXXXXXXXXXXXXXX
. 2016-12-06 15:01:56.400 Working directory: XXXXXXXXXXXXXXXXXXXXXX
. 2016-12-06 15:01:56.400 Process ID: 2396
. 2016-12-06 15:01:56.400 Command-line: "C:\XXXXXXXXXXXXX\WinSCP.exe" 
. 2016-12-06 15:01:56.400 Time zone: Current: GMT-5, Standard: GMT-5 (Eastern Standard Time), DST: GMT-4 (Eastern Daylight Time), DST Start: 3/13/2016, DST End: 11/6/2016
. 2016-12-06 15:01:56.400 Login time: Tuesday, December 06, 2016 3:01:56 PM
. 2016-12-06 15:01:56.400 --------------------------------------------------------------------------
. 2016-12-06 15:01:56.400 Session name: SFTP XXX.XXX.XXX.XXX (Site)
. 2016-12-06 15:01:56.400 Host name: XXX.XXX.XXX.XXX (Port: 22)
. 2016-12-06 15:01:56.400 User name: XXXXXXXX (Password: Yes, Key file: No, Passphrase: No)
. 2016-12-06 15:01:56.400 Tunnel: No
. 2016-12-06 15:01:56.400 Transfer Protocol: SFTP (SCP)
. 2016-12-06 15:01:56.400 Ping type: Null, Ping interval: 30 sec; Timeout: 15 sec
. 2016-12-06 15:01:56.400 Disable Nagle: No
. 2016-12-06 15:01:56.400 Proxy: None
. 2016-12-06 15:01:56.400 Send buffer: 262144
. 2016-12-06 15:01:56.400 SSH protocol version: 2; Compression: Yes
. 2016-12-06 15:01:56.400 Bypass authentication: No
. 2016-12-06 15:01:56.400 Try agent: No; Agent forwarding: No; TIS/CryptoCard: No; KI: Yes; GSSAPI: No
. 2016-12-06 15:01:56.400 Ciphers: aes,chacha20,WARN,blowfish,3des,arcfour,des; Ssh2DES: No
. 2016-12-06 15:01:56.400 KEX: ecdh,dh-group1-sha1,WARN,dh-group14-sha1,dh-gex-sha1,rsa
. 2016-12-06 15:01:56.400 SSH Bugs: Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto
. 2016-12-06 15:01:56.400 Simple channel: Yes
. 2016-12-06 15:01:56.400 Return code variable: Autodetect; Lookup user groups: Auto
. 2016-12-06 15:01:56.400 Shell: default
. 2016-12-06 15:01:56.400 EOL: LF, UTF: Auto
. 2016-12-06 15:01:56.400 Clear aliases: Yes, Unset nat.vars: Yes, Resolve symlinks: Yes; Follow directory symlinks: No
. 2016-12-06 15:01:56.400 LS: ls -la, Ign LS warn: Yes, Scp1 Comp: No
. 2016-12-06 15:01:56.400 SFTP Bugs: Auto,Auto
. 2016-12-06 15:01:56.400 SFTP Server: default
. 2016-12-06 15:01:56.400 Local directory: XXXXXXXXXXX, Remote directory: XXXXXXXXXXXXXXX, Update: No, Cache: Yes
. 2016-12-06 15:01:56.400 Cache directory changes: Yes, Permanent: Yes
. 2016-12-06 15:01:56.400 Recycle bin: Delete to: No, Overwritten to: No, Bin path: 
. 2016-12-06 15:01:56.400 DST mode: Unix
. 2016-12-06 15:01:56.400 --------------------------------------------------------------------------
. 2016-12-06 15:01:56.478 Looking up host "XXX.XXX.XXX.XXX" (IPv4) for SSH connection
. 2016-12-06 15:01:56.478 Connecting to XXX.XXX.XXX.XXX port 22
. 2016-12-06 15:02:17.494 Failed to connect to XXX.XXX.XXX.XXX: Network error: Connection timed out
. 2016-12-06 15:02:17.494 Knocking FTP port.
. 2016-12-06 15:02:19.494 FTP port did not open.
* 2016-12-06 15:02:19.509 (EFatal) Network error: Connection to "XXX.XXX.XXX.XXX" timed out.
[/code][/quote]

Options

Disable BBCode in this post

Notify me when a reply is posted (registered users only)

Add an Attachment

If you do not want to add an Attachment to your Post, please leave the Fields blank.

Filename

(maximum 10 MB; please compress large files; only common media, archive, text and programming file formats are allowed)

File Comment

Options

Private file (available to author and site moderators only)

Topic review

DanielEsostato

2016-12-21 13:29

Have you got a firewall between you and your domain. If you have you need access through the firewall for ftp

Guest

2016-12-08 15:56

Thank you, that worked. Do not know how I missed that one.

martin

Re: FTP Failover

2016-12-08

I've documented this here:
https://winscp.net/eng/docs/rawconfig

See the Interface\TryFtpWhenSshFails setting.

baumlerd

FTP Failover

2016-12-06 21:32

I am using the .NET Library to do SFTP transfer and during a PCI scan of logs they found that there was traffic going across FTP (port 21) but the program is only using SFTP (port 22). In the log files it was found that when port 22 failed it was trying to access port 21 which is disable via the firewalls but they are concerned as the traffic is there at all.

I tried a connection thru the WinSCP gui with logging turned on and it shows that WinSCP is "Knocking FTP port" after a failed connect on port 22.

Is there a way to stop this functionality so that it does not try port 21 after a failed port 22 connection?

. 2016-12-06 15:01:56.400 --------------------------------------------------------------------------

. 2016-12-06 15:01:56.400 WinSCP Version 5.9.3 (Build 7136) (OS 6.1.7601 Service Pack 1 - Windows 7 Professional)

. 2016-12-06 15:01:56.400 Configuration: HKCU\Software\Martin Prikryl\WinSCP 2\

. 2016-12-06 15:01:56.400 Log level: Debug 2

. 2016-12-06 15:01:56.400 Local account: XXXXXXXXXXXXXXX

. 2016-12-06 15:01:56.400 Working directory: XXXXXXXXXXXXXXXXXXXXXX

. 2016-12-06 15:01:56.400 Process ID: 2396

. 2016-12-06 15:01:56.400 Command-line: "C:\XXXXXXXXXXXXX\WinSCP.exe" 

. 2016-12-06 15:01:56.400 Time zone: Current: GMT-5, Standard: GMT-5 (Eastern Standard Time), DST: GMT-4 (Eastern Daylight Time), DST Start: 3/13/2016, DST End: 11/6/2016

. 2016-12-06 15:01:56.400 Login time: Tuesday, December 06, 2016 3:01:56 PM

. 2016-12-06 15:01:56.400 --------------------------------------------------------------------------

. 2016-12-06 15:01:56.400 Session name: SFTP XXX.XXX.XXX.XXX (Site)

. 2016-12-06 15:01:56.400 Host name: XXX.XXX.XXX.XXX (Port: 22)

. 2016-12-06 15:01:56.400 User name: XXXXXXXX (Password: Yes, Key file: No, Passphrase: No)

. 2016-12-06 15:01:56.400 Tunnel: No

. 2016-12-06 15:01:56.400 Transfer Protocol: SFTP (SCP)

. 2016-12-06 15:01:56.400 Ping type: Null, Ping interval: 30 sec; Timeout: 15 sec

. 2016-12-06 15:01:56.400 Disable Nagle: No

. 2016-12-06 15:01:56.400 Proxy: None

. 2016-12-06 15:01:56.400 Send buffer: 262144

. 2016-12-06 15:01:56.400 SSH protocol version: 2; Compression: Yes

. 2016-12-06 15:01:56.400 Bypass authentication: No

. 2016-12-06 15:01:56.400 Try agent: No; Agent forwarding: No; TIS/CryptoCard: No; KI: Yes; GSSAPI: No

. 2016-12-06 15:01:56.400 Ciphers: aes,chacha20,WARN,blowfish,3des,arcfour,des; Ssh2DES: No

. 2016-12-06 15:01:56.400 KEX: ecdh,dh-group1-sha1,WARN,dh-group14-sha1,dh-gex-sha1,rsa

. 2016-12-06 15:01:56.400 SSH Bugs: Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto

. 2016-12-06 15:01:56.400 Simple channel: Yes

. 2016-12-06 15:01:56.400 Return code variable: Autodetect; Lookup user groups: Auto

. 2016-12-06 15:01:56.400 Shell: default

. 2016-12-06 15:01:56.400 EOL: LF, UTF: Auto

. 2016-12-06 15:01:56.400 Clear aliases: Yes, Unset nat.vars: Yes, Resolve symlinks: Yes; Follow directory symlinks: No

. 2016-12-06 15:01:56.400 LS: ls -la, Ign LS warn: Yes, Scp1 Comp: No

. 2016-12-06 15:01:56.400 SFTP Bugs: Auto,Auto

. 2016-12-06 15:01:56.400 SFTP Server: default

. 2016-12-06 15:01:56.400 Local directory: XXXXXXXXXXX, Remote directory: XXXXXXXXXXXXXXX, Update: No, Cache: Yes

. 2016-12-06 15:01:56.400 Cache directory changes: Yes, Permanent: Yes

. 2016-12-06 15:01:56.400 Recycle bin: Delete to: No, Overwritten to: No, Bin path: 

. 2016-12-06 15:01:56.400 DST mode: Unix

. 2016-12-06 15:01:56.400 --------------------------------------------------------------------------

. 2016-12-06 15:01:56.478 Looking up host "XXX.XXX.XXX.XXX" (IPv4) for SSH connection

. 2016-12-06 15:01:56.478 Connecting to XXX.XXX.XXX.XXX port 22

. 2016-12-06 15:02:17.494 Failed to connect to XXX.XXX.XXX.XXX: Network error: Connection timed out

. 2016-12-06 15:02:17.494 Knocking FTP port.

. 2016-12-06 15:02:19.494 FTP port did not open.

* 2016-12-06 15:02:19.509 (EFatal) Network error: Connection to "XXX.XXX.XXX.XXX" timed out.

Post a reply

Topic review

Re: FTP Failover

FTP Failover

Documentation

Support

Associations

Follow Us