George is the network administrator of a large Internet company on the west coast. Per corporate policy, none
of the employees in the company are allowed to use FTP or SFTP programs without obtaining approval from
the IT department. Few managers are using SFTP program on their computers. Before talking to his boss,
George wants to have some proof of their activity. George wants to use Ethereal to monitor network traffic, but
only SFTP traffic to and from his network.
What filter should George use in Ethereal?
A.
src port 23 and dst port 23
B.
udp port 22 and host 172.16.28.1/24
C.
net port 22
D.
src port 22 and dst port 22
As SFTP runs as a subsystem of SSH it runs on whatever port the SSH daemon is listening on and that is administrator configurable. SFTP usually uses port 22 but can be configured to run on nearly any port. Port 22 is generally used for connection via SSH.Apr 13, 2011
Ethereal was the original name of the open-source WireShark packet analysis software. It was renamed Wireshark in 2006 based on trademark issues.
The Story of Getting SSH Port 22
The SSH (Secure Shell) port is 22. It is not a co-incidence. SSH was designed to replace both telnet (port 23) and ftp (port 21) and Port 22 was free in Spring 1995 at that time.
Source: https://www.linux.com/news/story-getting-ssh-port-22