Hi Daniel,

> Any chance you can get to see what the server thinks about the
> connect attempt it did back to the client due to the PORT command?

Hope this helps.
This is a ethereal dump captured on the client:

No. Time Source Destination Protocol
Info
     16 2.828167 192.168.2.224 192.168.2.94 TCP
51144 > ftp [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=2548537 TSER=0
WS=2
     17 2.828400 192.168.2.94 192.168.2.224 TCP
ftp > 51144 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460
TSV=4057286992 TSER=2548537 WS=0
     18 2.828430 192.168.2.224 192.168.2.94 TCP
51144 > ftp [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=2548538 TSER=4057286992
     19 2.830990 192.168.2.94 192.168.2.224 FTP
Response: 220 Welcome to Legolas FTP service.
     20 2.831014 192.168.2.224 192.168.2.94 TCP
51144 > ftp [ACK] Seq=1 Ack=38 Win=5840 Len=0 TSV=2548541 TSER=4057286995
     21 2.831242 192.168.2.224 192.168.2.94 FTP
Request: USER bast
     22 2.831377 192.168.2.94 192.168.2.224 TCP
ftp > 51144 [ACK] Seq=38 Ack=12 Win=5792 Len=0 TSV=4057286995 TSER=2548541
     23 2.831503 192.168.2.94 192.168.2.224 FTP
Response: 331 Please specify the password.
     24 2.831569 192.168.2.224 192.168.2.94 FTP
Request: PASS bast12
     25 2.837106 192.168.2.94 192.168.2.224 FTP
Response: 230 Login successful.
     26 2.837229 192.168.2.224 192.168.2.94 FTP
Request: PWD
     27 2.837567 192.168.2.94 192.168.2.224 FTP
Response: 257 "/home/bast"
     28 2.837767 192.168.2.224 192.168.2.94 FTP
Request: CWD /home
     29 2.838013 192.168.2.94 192.168.2.224 FTP
Response: 250 Directory successfully changed.
     30 2.838085 192.168.2.224 192.168.2.94 FTP
Request: CWD bast
     31 2.838303 192.168.2.94 192.168.2.224 FTP
Response: 250 Directory successfully changed.
     32 2.838371 192.168.2.224 192.168.2.94 FTP
Request: CWD test
     33 2.838589 192.168.2.94 192.168.2.224 FTP
Response: 250 Directory successfully changed.
     34 2.838907 192.168.2.224 192.168.2.94 FTP
Request: PORT 192,168,2,224,166,96
     35 2.839169 192.168.2.94 192.168.2.224 FTP
Response: 200 PORT command successful. Consider using PASV.
     36 2.879934 192.168.2.224 192.168.2.94 TCP
51144 > ftp [ACK] Seq=88 Ack=275 Win=5840 Len=0 TSV=2548589 TSER=4057287003
    289 32.827791 192.168.2.224 192.168.2.94 FTP
Request: CWD /home/bast
    290 32.828171 192.168.2.94 192.168.2.224 FTP
Response: 250 Directory successfully changed.
    291 32.828193 192.168.2.224 192.168.2.94 TCP
51144 > ftp [ACK] Seq=104 Ack=312 Win=5840 Len=0 TSV=2578542 TSER=4057316998
    292 32.828221 192.168.2.224 192.168.2.94 FTP
Request: CWD /home
    293 32.828438 192.168.2.94 192.168.2.224 FTP
Response: 250 Directory successfully changed.
    294 32.828466 192.168.2.224 192.168.2.94 FTP
Request: CWD bast
    295 32.828678 192.168.2.94 192.168.2.224 FTP
Response: 250 Directory successfully changed.
    296 32.828702 192.168.2.224 192.168.2.94 FTP
Request: CWD test
    297 32.828918 192.168.2.94 192.168.2.224 FTP
Response: 250 Directory successfully changed.
    298 32.828997 192.168.2.224 192.168.2.94 FTP
Request: PORT 192,168,2,224,165,22
    299 32.829232 192.168.2.94 192.168.2.224 FTP
Response: 200 PORT command successful. Consider using PASV.
    300 32.829293 192.168.2.224 192.168.2.94 FTP
Request: TYPE I
    301 32.829499 192.168.2.94 192.168.2.224 FTP
Response: 200 Switching to Binary mode.
    302 32.829530 192.168.2.224 192.168.2.94 FTP
Request: STOR import_20060523_00001_00001_0000000045.xml
    303 32.829934 192.168.2.94 192.168.2.224 TCP
ftp-data > 42262 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460
TSV=4057317000 TSER=0 WS=0
    304 32.829952 192.168.2.224 192.168.2.94 TCP
42262 > ftp-data [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460
TSV=2578544 TSER=4057317000 WS=2
    305 32.830084 192.168.2.94 192.168.2.224 TCP
ftp-data > 42262 [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=4057317000
TSER=2578544
    306 32.830191 192.168.2.94 192.168.2.224 FTP
Response: 150 Ok to send data.
    307 32.844713 192.168.2.224 192.168.2.94 FTP-DATA
FTP Data: 1448 bytes
    308 32.844731 192.168.2.224 192.168.2.94 FTP-DATA
FTP Data: 1448 bytes
    309 32.845377 192.168.2.94 192.168.2.224 TCP
ftp-data > 42262 [ACK] Seq=1 Ack=1449 Win=8688 Len=0 TSV=4057317016
TSER=2578559
    310 32.845418 192.168.2.224 192.168.2.94 FTP-DATA
FTP Data: 1448 bytes
    311 32.845428 192.168.2.224 192.168.2.94 FTP-DATA
FTP Data: 1448 bytes
    312 32.845436 192.168.2.224 192.168.2.94 FTP-DATA
FTP Data: 247 bytes
    313 32.845464 192.168.2.94 192.168.2.224 TCP
ftp-data > 42262 [ACK] Seq=1 Ack=2897 Win=11584 Len=0 TSV=4057317016
TSER=2578559
    314 32.846031 192.168.2.94 192.168.2.224 TCP
ftp-data > 42262 [ACK] Seq=1 Ack=4345 Win=14480 Len=0 TSV=4057317016
TSER=2578560
    315 32.846172 192.168.2.94 192.168.2.224 TCP
ftp-data > 42262 [ACK] Seq=1 Ack=5793 Win=17376 Len=0 TSV=4057317016
TSER=2578560
    316 32.846218 192.168.2.94 192.168.2.224 TCP
ftp-data > 42262 [FIN, ACK] Seq=1 Ack=6041 Win=17376 Len=0
TSV=4057317016 TSER=2578560
    317 32.846228 192.168.2.224 192.168.2.94 TCP
42262 > ftp-data [ACK] Seq=6041 Ack=2 Win=5792 Len=0 TSV=2578560
TSER=4057317016
    318 32.846503 192.168.2.94 192.168.2.224 FTP
Response: 226 File receive OK.
    319 32.846662 192.168.2.224 192.168.2.94 FTP
Request: QUIT
    320 32.846858 192.168.2.94 192.168.2.224 FTP
Response: 221 Goodbye.
    321 32.846959 192.168.2.224 192.168.2.94 TCP
51144 > ftp [FIN, ACK] Seq=225 Ack=563 Win=5840 Len=0 TSV=2578561
TSER=4057317017
    322 32.847173 192.168.2.94 192.168.2.224 TCP
ftp > 51144 [FIN, ACK] Seq=563 Ack=226 Win=5792 Len=0 TSV=4057317017
TSER=2578561
    323 32.847191 192.168.2.224 192.168.2.94 TCP
51144 > ftp [ACK] Seq=226 Ack=564 Win=5840 Len=0 TSV=2578561 TSER=4057317017

on the server it looks similar:

No. Time Source Destination Protocol
Info
     38 18.054885 192.168.2.224 192.168.2.94 TCP
36209 > ftp [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=4328267 TSER=0
WS=2
     39 18.054934 192.168.2.94 192.168.2.224 TCP
ftp > 36209 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460
TSV=4059066829 TSER=4328267 WS=0
     40 18.055075 192.168.2.224 192.168.2.94 TCP
36209 > ftp [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=4328267 TSER=4059066829
     41 18.057452 192.168.2.94 192.168.2.224 FTP
Response: 220 Welcome to Legolas FTP service.
     42 18.057627 192.168.2.224 192.168.2.94 TCP
36209 > ftp [ACK] Seq=1 Ack=38 Win=5840 Len=0 TSV=4328270 TSER=4059066831
     43 18.057971 192.168.2.224 192.168.2.94 FTP
Request: USER bast
     44 18.057986 192.168.2.94 192.168.2.224 TCP
ftp > 36209 [ACK] Seq=38 Ack=12 Win=5792 Len=0 TSV=4059066832 TSER=4328270
     45 18.058174 192.168.2.94 192.168.2.224 FTP
Response: 331 Please specify the password.
     46 18.058486 192.168.2.224 192.168.2.94 FTP
Request: PASS bast12
     47 18.063777 192.168.2.94 192.168.2.224 FTP
Response: 230 Login successful.
     48 18.063973 192.168.2.224 192.168.2.94 FTP
Request: PWD
     49 18.064143 192.168.2.94 192.168.2.224 FTP
Response: 257 "/home/bast"
     50 18.064402 192.168.2.224 192.168.2.94 FTP
Request: CWD /home
     51 18.064677 192.168.2.94 192.168.2.224 FTP
Response: 250 Directory successfully changed.
     52 18.064845 192.168.2.224 192.168.2.94 FTP
Request: CWD bast
     53 18.064970 192.168.2.94 192.168.2.224 FTP
Response: 250 Directory successfully changed.
     54 18.065122 192.168.2.224 192.168.2.94 FTP
Request: CWD test
     55 18.065246 192.168.2.94 192.168.2.224 FTP
Response: 250 Directory successfully changed.
     56 18.065640 192.168.2.224 192.168.2.94 FTP
Request: PORT 192,168,2,224,154,238
     57 18.065791 192.168.2.94 192.168.2.224 FTP
Response: 200 PORT command successful. Consider using PASV.
     58 18.105556 192.168.2.224 192.168.2.94 TCP
36209 > ftp [ACK] Seq=89 Ack=275 Win=5840 Len=0 TSV=4328318 TSER=4059066840
    125 48.056085 192.168.2.224 192.168.2.94 FTP
Request: CWD /home/bast
    126 48.056408 192.168.2.94 192.168.2.224 FTP
Response: 250 Directory successfully changed.
    127 48.056550 192.168.2.224 192.168.2.94 TCP
36209 > ftp [ACK] Seq=105 Ack=312 Win=5840 Len=0 TSV=4358271 TSER=4059096835
    128 48.056573 192.168.2.224 192.168.2.94 FTP
Request: CWD /home
    129 48.056722 192.168.2.94 192.168.2.224 FTP
Response: 250 Directory successfully changed.
    130 48.056872 192.168.2.224 192.168.2.94 FTP
Request: CWD bast
    131 48.056991 192.168.2.94 192.168.2.224 FTP
Response: 250 Directory successfully changed.
    132 48.057140 192.168.2.224 192.168.2.94 FTP
Request: CWD test
    133 48.057259 192.168.2.94 192.168.2.224 FTP
Response: 250 Directory successfully changed.
    134 48.057466 192.168.2.224 192.168.2.94 FTP
Request: PORT 192,168,2,224,162,73
    135 48.057593 192.168.2.94 192.168.2.224 FTP
Response: 200 PORT command successful. Consider using PASV.
    136 48.057790 192.168.2.224 192.168.2.94 FTP
Request: TYPE I
    137 48.057901 192.168.2.94 192.168.2.224 FTP
Response: 200 Switching to Binary mode.
    138 48.058079 192.168.2.224 192.168.2.94 FTP
Request: STOR import_20060523_00001_00001_0000000045.xml
    139 48.058385 192.168.2.94 192.168.2.224 TCP
ftp-data > 41545 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460
TSV=4059096837 TSER=0 WS=0
    140 48.058524 192.168.2.224 192.168.2.94 TCP
41545 > ftp-data [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460
TSV=4358273 TSER=4059096837 WS=2
    141 48.058545 192.168.2.94 192.168.2.224 TCP
ftp-data > 41545 [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=4059096837
TSER=4358273
    142 48.058745 192.168.2.94 192.168.2.224 FTP
Response: 150 Ok to send data.
    143 48.059568 192.168.2.224 192.168.2.94 FTP-DATA
FTP Data: 1448 bytes
    144 48.059632 192.168.2.94 192.168.2.224 TCP
ftp-data > 41545 [ACK] Seq=1 Ack=1449 Win=8688 Len=0 TSV=4059096838
TSER=4358274
    145 48.059692 192.168.2.224 192.168.2.94 FTP-DATA
FTP Data: 1448 bytes
    146 48.059776 192.168.2.94 192.168.2.224 TCP
ftp-data > 41545 [ACK] Seq=1 Ack=2897 Win=11584 Len=0 TSV=4059096838
TSER=4358274
    147 48.059810 192.168.2.224 192.168.2.94 FTP-DATA
FTP Data: 1448 bytes
    148 48.059879 192.168.2.94 192.168.2.224 TCP
ftp-data > 41545 [ACK] Seq=1 Ack=4345 Win=14480 Len=0 TSV=4059096838
TSER=4358274
    149 48.060243 192.168.2.224 192.168.2.94 FTP-DATA
FTP Data: 1448 bytes
    150 48.060262 192.168.2.224 192.168.2.94 FTP-DATA
FTP Data: 247 bytes
    151 48.060360 192.168.2.94 192.168.2.224 TCP
ftp-data > 41545 [ACK] Seq=1 Ack=5793 Win=17376 Len=0 TSV=4059096839
TSER=4358275
    152 48.060440 192.168.2.94 192.168.2.224 TCP
ftp-data > 41545 [FIN, ACK] Seq=1 Ack=6041 Win=17376 Len=0
TSV=4059096839 TSER=4358275
    153 48.060559 192.168.2.224 192.168.2.94 TCP
41545 > ftp-data [ACK] Seq=6041 Ack=2 Win=5792 Len=0 TSV=4358275
TSER=4059096839
    154 48.060744 192.168.2.94 192.168.2.224 FTP
Response: 226 File receive OK.
    155 48.060975 192.168.2.224 192.168.2.94 FTP
Request: QUIT
    156 48.061103 192.168.2.94 192.168.2.224 FTP
Response: 221 Goodbye.
    157 48.061450 192.168.2.94 192.168.2.224 TCP
ftp > 36209 [FIN, ACK] Seq=563 Ack=226 Win=5792 Len=0 TSV=4059096840
TSER=4358276
    158 48.061557 192.168.2.224 192.168.2.94 TCP
36209 > ftp [FIN, ACK] Seq=226 Ack=563 Win=5840 Len=0 TSV=4358276
TSER=4059096840
    159 48.061595 192.168.2.94 192.168.2.224 TCP
ftp > 36209 [ACK] Seq=564 Ack=227 Win=5792 Len=0 TSV=4059096840 TSER=4358276
    160 48.061576 192.168.2.224 192.168.2.94 TCP
36209 > ftp [ACK] Seq=227 Ack=564 Win=5840 Len=0 TSV=4358276 TSER=4059096840
Received on 2006-06-08