Let's switch things up and finish with the FTPS passive mode upload.
The other two combinations, active mode upload and passive mode download,
work similarly,
and I've included the packet captures if you'd like to explore them later.
In passive mode, the client initiates the data session with the server.
Which of these two TCP ports was the port allocated by the server and
sent to the client in the PASV message response?
Again, pause the video if you need a moment.
The TCP port 42592 is the dynamic port that the server is
listening on and that the client connects to.
Also remember we configured a port range of 42500 to 42599 so
any passive ports must be from that range.
Again, we see data moving in the download direction,
which is specific to FTPS and doesn't represent actual file transfer.
Finally, the file is uploaded to the FTP server and is encrypted. The bytes reveal this as well, as we have no idea what was transferred.