I've got the following question. Some users logon to an ftp site via Internet Explorer. This is the following site: http://ftp.bp.vnu.com:8000/ People download files from that site, but when I look within Probe and look for the Ip adress of the workstation where is logged on to the http://ftp.bp.vnu.com:8000/ site, I cannot see that there is more network-traffic. How can I fix this?
The actual port used to transfer files might still be FTP-data (20). It might also use PASV FTP transfer mode, in which case the port numbers are dynamicall assigned for each transfer. In this case, Network Probe collects all these ports under FTP-data (20).
Port 8000 is registered as iRDMI in the config/iana_port_numbers.ini file under the Network Probe installation directory.