LL      IIIII NN   NN KK  KK EEEEEEE RRRRRR  RRRRRR   OOOOO  RRRRRR 
LL       III  NNN  NN KK KK  EE      RR   RR RR   RR OO   OO RR   RR
LL       III  NN N NN KKKK   EEEEE   RRRRRR  RRRRRR  OO   OO RRRRRR 
LL       III  NN  NNN KK KK  EE      RR  RR  RR  RR  OO   OO RR  RR 
LLLLLLL IIIII NN   NN KK  KK EEEEEEE RR   RR RR   RR  OOOOO  RR   RR
                                                           ramblings
____________________________________________________________________
Posted on: Wednesday, April 22nd, 2009 at 03:56.
Filed under: All, ServerAdmin.
RSS 2.0 feed for comments.
You can leave a response, or trackback from your own site.

If you’re ever working with vsftpd, and filezilla dumps out this error:

GnuTLS error -8: A record packet with illegal version was received

You’re not finding any relevant error messages in your vsftpd log file, nor in the xferlog, nor in /var/log/messages ?

Well, vsftpd seems to be horribly un-verbose. The cause of this error is not because of some obscure TLS problem. What’s causing it is vsftpd dumping out a plain-text error in the middle of the encrypted data stream, causing the ftp client to pop out this error.

The only way to debug this was by packet sniffing the actual connection with wireshark. Following the TCP stream with wireshark, the error I was looking for in the log files, was clearly visible at the end of the TLS encrypted data, before the connection dropped.

Something like:

\5_TXC,[1d.c}$D12N8(,"ndKm:?Y5O\M)5{nj2*Uaiym8-T4rt2c'#/K(
dvU2@:M.&.X=:-A*4aUm3:)!)y5Kt$'&"ZQN:'v%X500 OOPS: Cannot change directory: /foo

It turned out to be a simple permissions issue… .
Why vsftpd isn’t logging these to it’s own log file, or even syslogd, who knows. At the most verbose configuration, it is logging all sorts of things, except the actual error causing the problem!

Had encryption not been enabled in vsftpd, the error would have been visible in the FTP client.

So to any one encountering this, I would recommend either temporarily disabling encryption in vsftpd in order to see the error, or if that is not an option, use a packet sniffer to view the error.

I figured I would post this since google didn’t bring up much useful as I was debugging this. :)

pixelstats trackingpixel
____________________________________________________________________

71 Responses to “vsftpd debugging”

  1. mouser says:

    Awesome discovery.. that really is tricky isn’t it? What’s the point of an error log if you don’t log errors!

  2. Mathias says:

    Thanks a bunch for posting this! Just helped me out, big time.

  3. Daniel says:

    Thanks, this did it for me…

    quite a stinker in this respect, vsftpd

    Regards,

    Daniel

  4. Christophe says:

    Thanks a lot, i searched for a while, too.. !

  5. adeger says:

    Thanks for this great tip/observation. I was getting failures with encrypted PASV channel negotiations (due to a known but in VSFTPD 2.2.0) and couldn’t really see them until I retried unencrypted.

  6. Ferdinando says:

    Thanks a LOT from Italy!
    You’ve just allowed me to start an early weekend :-)
    I’ve set up VSFTPD with PAM+MySQL virtual users and TLS/SSL… and I forgot to create the virtual user homedir before connecting.
    Too bad that VSFTPD virtual user’s home directories cannot be created “on-the-fly”… or maybe via PAM??? Who knows… I’ll Google for it on Monday :-)

  7. peter says:

    This is great, still helping. Thanks!

  8. Srinivas says:

    Awesome! you saved me.
    Thanks,
    Srinivas

    • youtube.com says:

      The reason being kids are less inclined to become complacent
      using their contact washing strategies and a youngster is prone to follow the suggestions of a medical expert than their
      parents. But it is plain that people glasses outlets on the Internet are far more with the capacity of
      featuring a large number of glasses products
      than nearby retailers.

  9. ug says:

    Great information here. Not available at many places. In my case I had 700 perms and filezilla+Vsftpd threw this error. Moment I did 750 on my home dir, I saw the dir listing.

    alternatively I have decided to use below two lines in addition to chroot_local_user=YES.

    chroot_list_enable=YES
    chroot_list_file=/etc/vsftpd/chroot_list

    vsftpd/chroot_list has my username in it. With these three lines and 700 perms on my home directory, it still works fine. Didn’t need to make 750 in this case.

    Ofcourse I force SSL for login and data which i didn’t mention before, but all this is happening because of that so.. :)

  10. Testfez nos applications pour vos envois b2b de SMS. Pensé pour
    le particulier comme por l’entreprise, le service vous permet depuis internet de diffuser
    vos messages à destination de tous vos contacts. Capable poour
    expédier de très gros volumes, notre serveur SMS est très conseillé pour effectuer vos
    smsing en masse.
    Armée d’une innovante fonctionnalité de programmation, notre entreprise est la référence des logiciels pour l’expédition de SMS et de MMS.

    Vous pouvez élaborer en quelques secondes vos campagnes à vers des
    centaines de destinataires.

  11. Within the light of this totally free exchange should be
    examined. The risk is out there in both the real world and online.

    Deciding to charge for key components of the
    Playstation Network that had previously been available
    for free would lead to a massive backlash from both the media and loyal Sony consumers.
    PSN Code Generator cards have become useful for gamers because they are easily accepted and utilized
    widely by Play – Station video gaming enthusiasts.

    Additionally, the game explores concepts of the subconscious.
    top : window; size_viewport = h : w. When you get into the site, you
    will see a few tabs at the top that say Property,
    Earn Points, Spend Points, and youll see a few other
    tabs.

  12. Dianabol says:

    Attractive section of content. I just stumbled upon your
    web site and in accession capital to assert that I acquire in
    fact enjoyed account your blog posts. Anyway I’ll be subscribing to your augment
    and even I achievement you access consistently rapidly.

  13. The Trade*Plus service was offered to investors who used dial-up internet services like Compuserve and America Online.

    Now a days lots of guiding stuff is available for investing online like e – Books, newsletters and other online products.
    t particularly interested in investing in that company.

  14. Having friend with girls that you like is so much easier due to the emergence of several social networking sites.

    To be sure that very idea of messaging, you will find two methods of an individual to convey his messages.
    Ever see NFL players beat their chest like a gorilla after
    they just made a good play.

  15. Hi there to all, it’s genuinely a plpeasant for me to visit this site, it contains helpful Information.

  16. Bows says:

    Birds don’t need to do this during the autumn season.
    Another friend who came out later to hunt catches up to you and offers you the same number of birds he harvested
    to get you closer to your bag limit. Hunters use this type of
    bows mostly for harvesting deer.

  17. bgo.url.Ph says:

    However, if you’re serious about your movie project – then you’ll want to consider professional video equipment.
    There are always some splendid or interesting scenes in a video,
    do you want to save them as pictures to your Mac for
    a special momery. What should you look for in a computer program that can transform a VHS
    video to DVD. The best way to intercept text messages of
    any cell phone is to use appropriate monitoring tools.
    Thus, today the firm based in Cupertino eliminated with the introduction of improvements in the technical
    section and the new i – Phone OS 3. You are able to write
    whatever you have discovered. But who would use a software package
    like this, and how could it help your business. There’re
    many factors that result in quality loss during importing process.
    This is because we see the people on television as being the most influential people in the
    world. Once compression has taken place, it cannot be undone.
    As an online marketer, you should strive to deliver value to readers on your blog, on social networks, via your email newsletter and more.
    Being able to sell a software package along with a video users guide would be a major draw card,
    as it would allow the buyer to use the package almost instantly.
    New industries have sprung up to meet this growing need.
    Mac Kindle Fire Tablet Converter is also a best Audio Converter that can convert between audios such
    as MP3, WAV, AAC, M4A, AC3, FLAC, MP2, MKA, AMR, etc and allows you extract audio from video.
    If you want to personalize a video in your greeting card.
    This enables you to share daily life events with friends and
    family in other parts of the country or the
    world, or to arrange a video-conference with colleagues and
    maintain long distance relationships of all kinds.
    If using a camera, keep it in “VCR” mode, not in “Camera” mode.
    For example, if you intend to connect your VCR to your Home Theater’s computer
    using a Coax Cable, you do not have the option to connect the
    VCR using RCA cables if your capture device only
    has a coax connection. Picture and videos captured by Picture Booth worth memories and
    professional aspects. This is because by recording the
    phone calls the business houses can analyse the services given by the employees
    to their clients. Despite the popularity of online video, most video sites feel like the early days of radio when it
    comes to user- friendly features (or obvious lack thereof).
    Through video capturing software you can actually control your camcorder to stop, start, rewind, and record your movies to a video file on your computer.
    These systems used for strategic analysis of the data related to healthcare will enable you to manage
    costs and diseases, therefore, increasing the profitability
    and productivity of a healthcare unit. The Panopto experts aided Pope to remedy this
    problem. Throughout the download, you possibly can view detailed
    details about the download progress.

  18. stock apps says:

    The cost is less than half of that of gasoline per gallon equivalent although more that doubles the fuel weight in the car.
    Needless to say, Dimon was furious at the lawyers
    for this several hundred million dollar error. When you
    get a compelling email from a “guru” focus think what’s magnetic about this.

  19. Make an effort: Unique content is, by definition, rare.
    The more you know and understand, the easier it will be for you to appreciate the value and to engage in the process for your own benefits.

    So for 500 words of content at 5% for these 3 long tail phrases you would
    have 200 of the words keywords.

  20. Admiring the dedication you put into your site and detailed information you present.
    It’s awesome to come across a blog every once in a while that isn’t the same out of date rehashed information. Fantastic read!
    I’ve bookmarked your site and I’m adding your RSS feeds to my Google account.

  21. ” While I would consider Intel (NASDAQ:INTC) to be a riskless bet at $20 per share-where it yields 4. “The
    house cleaning industry comes in after the builders have nailed everything down,” according to Will P. Even maybe someone might want to buy a completely electric vehicle and get the $7200 or $5500 vehicle tax credit.

  22. Jerilyn says:

    I’m not sure exactly why but this blog is loading extremely slow for
    me. Is anyone else having this problem or is it a problem on my end?

    I’ll check back later on and see if the problem still exists.

  23. exploder says:

    I really like what you guys are up too. This sort of clever
    work and reporting! Keep up the very good works guys I’ve included you guys to my own blogroll.

  24. My spouse and I absolutely love your blog and find most of your post’s
    to be exactly what I’m looking for. Does one offer guest writers to write content to suit your needs?
    I wouldn’t mind publishing a post or elaborating on a few of the subjects you
    write in relation to here. Again, awesome web log!

  25. Hi, Neat post. There is a problem along with your web site in web explorer, would
    test this? IE nonetheless is the market leader and a good component
    of folks will pass over your wonderful writing due to this problem.

  26. Hi, I want to subscribe for this weblog to take most recent updates, so where can i
    do it please help out.

  27. On remarque direct que vous connaissez superbement bien ce que vous avancez

  28. Hans says:

    It’s hard to find your articles in google.
    I found it on 15 spot, you should build quality
    backlinks , it will help you to get more visitors.
    I know how to help you, just search in google – k2 seo tips

  29. Having read this I believed it was rather informative.
    I appreciate you spending some time and energy to put this content together.

    I once again find myself personally spending a significant amount of time both reading and commenting.

    But so what, it was still worth it!

  30. Warner says:

    I see a lot of interesting articles on your page.

    You have to spend a lot of time writing, i know how to save you a lot of time,
    there is a tool that creates high quality, google friendly posts in couple of
    seconds, just search in google – k2 unlimited content

  31. Discover More Here

    linkerror ramblings » vsftpd debugging

  32. Thanks for sharing such a fastiԁiouѕ opinion, paragraph is pleasant, thatƴs why i have
    read it fully

  33. Find Out More

    linkerror ramblings » vsftpd debugging

  34. loan for starting a business

    linkerror ramblings » vsftpd debugging

  35. how to make money doing nothing

    linkerror ramblings » vsftpd debugging

  36. make easy money fast

    linkerror ramblings » vsftpd debugging

  37. Google says:

    I like the valuable information you provide in your articles.
    I’ll bookmark your weblog and check again here frequently.
    I’m quite certain I will learn a lot of new stuff
    right here! Best of luck for the next!

  38. side Business ideas

    linkerror ramblings » vsftpd debugging

  39. Delbert says:

    Another primary type of dog training course meant for those
    who dog training techniques simply do not play well with people and other pets.
    Having a well adjusted dog and owner.

  40. Israel says:

    Canine behavior is dog training noted. You can even become
    your dog’s training more difficult. When your pet attempts to communicate
    well with people to have to practice your pet as well as proper sizing.
    Lots of patience, and by the absence of
    food so as to prevent excessive barking or that excited jumping
    that happens, stop etc.

  41. Bruno says:

    Dog Training collarIn the past 3 years as a result, you’ll need to take care
    of the word” dog training techniques training”.
    Consult your vet before taking your pet any time you and have fun when teaching
    a dog is easy to research.

  42. Have you ever thought about writing an e-book or guest authoring on other websites?
    I have a blog based upon on the same information you discuss and would
    love to have you share some stories/information. I know
    my visitors would appreciate your work. If you are even remotely interested, feel free to
    shoot me an e mail.

  43. financial life planning

    linkerror ramblings » vsftpd debugging

  44. Ariesvilando.Wordpress.Com

    linkerror ramblings » vsftpd debugging

  45. visit my home page

    linkerror ramblings » vsftpd debugging

  46. This site certainly has all of the information I wanted concerning this
    subject and didn’t know who to ask.

  47. Get More Info

    linkerror ramblings » vsftpd debugging

  48. Fey rented his machines to saloons and family guy the quest for stuff cheats bars based on requirements.
    Even though this game contains physical violence, harsh
    language and it is hard to believe that the OS of the pigs hiding behind different types
    of mobile games and free themes.

  49. mamahadenough.net

    linkerror ramblings » vsftpd debugging

  50. Learn Additional

    linkerror ramblings » vsftpd debugging

  51. i car Check says:

    Hello just wanted to give you a quick heads up and let you know a
    few of the images aren’t loading properly.
    I’m not sure why but I think its a linking issue. I’ve tried it in two
    different web browsers and both show the same results.

  52. Do you have a spam issue on this site; I also am a blogger, and I was wanting to know your situation; we have
    created some nice practices and we are looking to trade strategies with
    other folks, why not shoot me an email if interested.

  53. Dylan says:

    I read a lot of interesting articles here. Probably you spend a lot of time writing,
    i know how to save you a lot of time, there is an online tool that creates unique, SEO friendly articles in seconds,
    just type in google – laranitas free content source

  54. lowlymiscellany27.soup.Io

    linkerror ramblings » vsftpd debugging

  55. Great site. Plenty of useful info here. I’m sending it
    to a few pals ans also sharing in delicious. And naturally, thank you to your sweat!

  56. my webpage says:

    my webpage

    linkerror ramblings » vsftpd debugging

  57. Hi there to every , as I am really eager of reading this web site’s post to
    be updated on a regular basis. It carries good stuff.

  58. Hello there! I know this is kinda off topic but I was wondering which blog platform are you using
    for this website? I’m getting tired of WordPress because I’ve had problems with hackers and I’m looking at
    alternatives for another platform. I would be fantastic if you could point me in the direction of a good platform.

  59. how to start a Painting business

    linkerror ramblings » vsftpd debugging

  60. Surfside Concepts Inc

    linkerror ramblings » vsftpd debugging

  61. chealwoo.com says:

    chealwoo.com

    linkerror ramblings » vsftpd debugging

  62. Template Business Plan

    linkerror ramblings » vsftpd debugging

  63. Sammie says:

    Excellent goods from you, man. I’ve understand your stuff previous to and you
    are just extremely fantastic. I really like what you have acquired here,
    really like what you are stating and the way in which you say
    it. You make it entertaining and you still take care of to keep it
    smart. I can not wait to read far more from you. This is actually a terrific web site.

  64. Thanks for sharing such a pleasant idea, article is good, thats why i have read it
    fully

  65. Don’t even think about buying opinion of You – Tube and Twitter.
    Now, if the pages are certainly not included
    inside search results, you are going to needless to say be missing
    some targeted visitors for a pages. Well social networking sites are all about reaching maximum customers in short duration.

  66. simply click the next website page

    linkerror ramblings » vsftpd debugging

  67. Salvatore says:

    They will all provide lighting to your indoor garden, but each comes with different positive and negative characteristics that you’ll have to weigh appropriately.
    The running cost of these lights is less than half of HID or other types of lighting systems.
    They produce the two main wavelengths that plants need for their growth, which are the blue light and the red light.

  68. Thanks for sharing your thoughts. I really appreciate your efforts and I will be waiting for your next post thanks once again.

____________________________________________________________________

Leave a Reply