Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

For some reason, no matter how many times I try, after a client sends the PASV command (which is correctly received by the server), the server's reply (227 Entering Passive Mode) doesn't get back to the client. I've gone as far as analyzing both client and server traffic with Wireshark to figure that much out. What's especially strange is that that last packet sent by the server has the exact same TCP settings as every other packet it has successfully sent so far. It's all going to the same client, at the same port, and yet for some reason this 227 response never gets through. I am completely floored as to why.

Here are screenshots of the client and server interactions:

Client Capture Client Capture

As you can see it never recieves ACK for it's PASV command. It tries once more, and then gives up.

Server Capture Server Capture

As you can see, it receives the PASV command, and sends a response, but it never gets through to the client. It gets the retransmission later and sends the response 3 more times, but again it never gets through. Then it disconnects.

I can't imagine how it's possible that all the other TCP packets get from server to client without issue, but this particular TCP packet does not. The TCP headers are identical for all packets to and from the server respectively, so from my understanding, all routers, firewalls, ISPs, etc. should be treating them equally unless they are packet sniffing.

share|improve this question

2 Answers 2

Apparent solution: I've been messing with anything on my router that I thought might be corrupting outgoing packets. I disabled something called "NAT ALG" (Application-level gateway) and the FTP client and server started communicating normally in passive mode again. Apparently this protocol snooping causes problems for a lot of people.

For future readers, my modem/router is a Motorola SBG6580 SurfBoard. Standard issue for my ISP EastLink. It came preconfigured with many such "features" and some seemed be be corrupting outgoing packets at the Ethernet II frame level.

share|improve this answer

I think this is a known issue with FileZilla version < , do you by any chance use the older version?

share|improve this answer
Afraid not. Client is the latest stable version as is the server. –  Alain Jun 10 '13 at 23:48

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.