Incoming Packet Was Garbled On Decryption

Message

yoshicoby · #1 Post by **yoshicoby** » 2008-07-07 17:18

I can't open the folders (subfolders) on my directory. The folders have a question mark (?) over the folder. When I click on the folder there's an error with decryption or something and then I get disconnected. Can anyone help me? The log shows error messages:

Status: Connecting to files.chartercom.com:22...
Response: fzSftp started
Command: open "Conmap@files.chartercom.com" 22
Command: Pass: ********
Status: Connected to files.chartercom.com
Status: Retrieving directory listing...
Command: pwd
Response: Current directory is: "/"
Command: ls
Status: Listing directory /
Status: Calculating timezone offset of server...
Command: mtime "Belleville"
Response: 1214573276
Status: Timezone offsets: Server: -18056 seconds. Local: -14400 seconds. Difference: 3656 seconds.
Status: Directory listing successful
Status: Retrieving directory listing...
Command: cd "/StPeters"
Response: New directory is: "/StPeters"
Command: ls
Status: Listing directory /StPeters
Error: Incoming packet was garbled on decryption
Error: Failed to retrieve directory listing

#2 Post by **botg** » 2008-07-07 17:35

Which SSH server (product + version) are you using?

yoshicoby · #3 Post by **yoshicoby** » 2008-07-07 18:35

I'm not sure what you're asking exactly. I'm new to this application. SFTP - SSH transfer protocol?

da chicken · #4 Post by **da chicken** » 2008-07-07 19:16

No, "what is the server?" means the flavor of SSHd you're connecting to. OpenSSH 5.0 on Linux? VShell 3.0 on Windows? Most servers identify themselves when you first connect.

Either the server is sending bad packets, something is relaying bad packets (like a firewall), or FileZilla is decoding bad packets (pretty unlikely or there would be a lot more reports of this).

yoshicoby · #5 Post by **yoshicoby** » 2008-07-07 19:48

I'm not sure what server we're connecting to. I'm a contractor for Charter Cable, and connecting to their server to access maps. So, I have no idea what kind of server they're using, but I'll try to find out and post it. Thanks for your help.

#6 Post by **boco** » 2008-07-07 20:04

Look at the log, usually it's in the welcome message.

#7 Post by **botg** » 2008-07-07 20:08

For SFTp connections you need to set debug level to 3 to show the details.

yoshicoby · #8 Post by **yoshicoby** » 2008-07-07 20:22

okay. I set the debug level to 3, connected, and log as follows:

Status: Connecting to files.chartercom.com:22...
Trace: Going to execute "C:\Program Files\FileZilla FTP Client\fzsftp.exe"
Response: fzSftp started
Trace: CSftpControlSocket::ConnectParseResponse(fzSftp started)
Trace: CSftpControlSocket::SendNextCommand()
Trace: CSftpControlSocket::ConnectSend()
Command: open "Conmap@files.chartercom.com" 22
Trace: Looking up host "files.chartercom.com"
Trace: Connecting to 24.217.29.215 port 22
Trace: Server version: SSH-2.0-1.36 sshlib: GlobalScape
Trace: Using SSH protocol version 2
Trace: We claim version: SSH-2.0-PuTTY_Local:_Jul__5_2008_14:32:13
Trace: Using Diffie-Hellman with standard group "group1"
Trace: Doing Diffie-Hellman key exchange with hash SHA-1
Trace: Host key fingerprint is:
Trace: ssh-dss 1024 7d:0c:b2:26:89:60:a7:f0:d0:bf:2d:b6:40:71:fa:fb
Trace: Initialised AES-256 CBC client->server encryption
Trace: Initialised HMAC-SHA1 client->server MAC algorithm
Trace: Initialised AES-256 CBC server->client encryption
Trace: Initialised HMAC-SHA1 server->client MAC algorithm
Command: Pass: ********
Trace: Sent password
Trace: Access granted
Trace: Opened channel for session
Trace: Started a shell/command
Status: Connected to files.chartercom.com
Trace: CSftpControlSocket::ConnectParseResponse()
Trace: CSftpControlSocket::ResetOperation(0)
Trace: CControlSocket::ResetOperation(0)
Status: Retrieving directory listing...
Trace: CSftpControlSocket::SendNextCommand()
Trace: CSftpControlSocket::ChangeDirSend()
Command: pwd
Response: Current directory is: "/"
Trace: CSftpControlSocket::ResetOperation(0)
Trace: CControlSocket::ResetOperation(0)
Trace: CSftpControlSocket::ParseSubcommandResult(0)
Trace: CSftpControlSocket::ListSubcommandResult()
Trace: CSftpControlSocket::SendNextCommand()
Trace: CSftpControlSocket::ListSend()
Command: ls
Status: Listing directory /
Trace: CSftpControlSocket::ListParseResponse()
Trace: CSftpControlSocket::SendNextCommand()
Trace: CSftpControlSocket::ListSend()
Status: Calculating timezone offset of server...
Command: mtime "Belleville"
Response: 1214573276
Trace: CSftpControlSocket::ListParseResponse(1214573276)
Status: Timezone offsets: Server: -18056 seconds. Local: -14400 seconds. Difference: 3656 seconds.
Trace: CSftpControlSocket::ResetOperation(0)
Trace: CControlSocket::ResetOperation(0)
Status: Directory listing successful

#9 Post by **botg** » 2008-07-07 20:44

http://www.chiark.greenend.org.uk/~sgta ... axpkt.html:

Excerpt:

When using one SSH-2 server, identifying itself as "1.36_sshlib GlobalSCAPE", PuTTY reports "Incoming packet was garbled on decryption". This was originally reported as a bug in FileZilla, and turns out to be a bug in the server.

#10 Post by **botg** » 2008-07-07 21:22

It appears your broken server uses a slightly different version string. I've forwarded this to the PuTTY developers.

In any case, you should consider upgrading to a proper server. Personally I'd use the port of OpenSSH included in Cygwin as SFTP server.

da chicken · #11 Post by **da chicken** » 2008-07-08 04:06

If he's a contractor, the chances of him getting IT to rebuild the server from Globalscape SFTPd (which costs about $1200 and trivially integrates into a Windows domain) for OpenSSH via Cygwin (which is pretty horrible and difficult to administer from an IT perspective, especially if you want to use ) are somewhere between zero and none. He should decidedly report the bug to IT, but I'm willing to bet money they won't change it. The amount of money they save by not needing to administer the server is more than the cost of the Windows Server and GS license. That's why Windows is popular.

You'll be further along to get an SFTP client from Charter when you complain about the bug. They should give you a copy of CuteFTP Pro or similar which should work with their broken implementation.

#12 Post by **botg** » 2008-07-08 07:37

Nice example of vendor lock-in.

#13 Post by **boco** » 2008-07-08 07:50

botg wrote:Nice example of vendor lock-in.

And another point pro Open Source.

Kevin · #14 Post by **Kevin** » 2008-08-06 19:34

I get the same problem when I connect via
SFTP - SSH File Transfer Protocol
using FileZilla 3.0.4.1, FileZilla 3.1.0.1, FileZilla Unstable 3.1.1-rc1 or generally FileZilla 3.x:

Error: Incoming packet was garbled on decryption
Error: Failed to retrieve directory listing

The server I connect to is GlobalSCAPE Secure FTP Server 3.14 with SFTP extension.

The error is only generated when trying to list folders with more than 209...215 or more subdirectories in it.
Maybe depending on the length of the subdirectory names?

The restriction to use Blowfish as the only encryption algorithm didn't help.

I get no problems with FileZilla 2.2.22, FileZilla 2.2.29, FileZilla 2.2.32 or generally FileZilla 2.x
Any FileZilla 2.x version is able to list a folder with about 2300 subdirectories.

Where is the bug?
Kevin

#15 Post by **botg** » 2008-08-06 22:11

Got logs? (Set debug level to 3)

FileZilla Forums