wget FTP下载问题

使用文件资源管理器可正常访问FTP并下载，使用命令行wget无法正常下载，查明为下载模式区别。相比于HTTP，FTP协议要复杂，FTP协议要用到两个TCP连接，一个是命令链路，用来在FTP客户端与服务器之间传递命令；另一个是数据链路，用来上传或下载数据。两种工作方式：PORT方式和PASV方式，中文意思为主动式和被动式。 PORT（主动）：客户端向服务器的FTP端口（默认是21）发送连接请求，服务器接受连接，建立一条命令链路。当需要传送数据时，客户端在命令链路上用 PORT命令告诉服务器。服务器向客户端的****端口发送连接请求，建立一条数据链路来传送数据。 PASV（被动）：客户端向服务器的FTP端口（默认是21）发送连接请求，服务器接受连接，建立一条命令链路。当需要传送数据时，服务器在命令链路上用 PASV命令告诉客户端。客户端向服务器的****端口发送连接请求，建立一条数据链路来传送数据。

普通wget下载

[root@localhost ~]#wget ftp://user:passwd@192.168.10.1/test.pem
--2015-12-09 15:55:24--  ftp://user:passwd@192.168.10.1/test.pem
           => `test.pem'
Connecting to 192.168.10.1:21... connected.
Logging in as admin ... Logged in!
==> SYST ... done.    ==> PWD ... done.
==> TYPE I ... done.  ==> CWD (1) /test ... done.
==> SIZE test.pem ... 272
==> PASV ...

Retrying.

查看到wget是使用PASV方式下载无法下载，修改为PORT方式下载可正常下载

[root@localhost ~]#wget --no-passive-ftp ftp://user:passwd@192.168.10.1/test.pem
--2015-12-09 15:55:24--  ftp://user:passwd@192.168.10.1/test.pem
           => `test.pem'
Connecting to 192.168.10.1:21... connected.
Logging in as admin ... Logged in!
==> SYST ... done.    ==> PWD ... done.
==> TYPE I ... done.  ==> CWD (1) /test ... done.
==> SIZE test.pem ... 272
==> PORT ... done.    ==> RETR test.pem ... done.
Length: 272 (unauthoritative)

100%[=================================================================================================================================================================>] 272         --.-K/s   in 0.002s

2015-12-09 16:08:52 (133 KB/s) - `test.pem' saved [272]

此时再使用PASV方式下载又可正常下载

[root@localhost ~]#wget ftp://user:passwd@192.168.10.1/test.pem
--2015-12-09 15:55:24--  ftp://user:passwd@192.168.10.1/test.pem
           => `test.pem'
Connecting to 192.168.10.1:21... connected.
Logging in as admin ... Logged in!
==> SYST ... done.    ==> PWD ... done.
==> TYPE I ... done.  ==> CWD (1) /test ... done.
==> SIZE test.pem ... 272
==> PASV ... done.    ==> RETR test.pem ... done.
Length: 272 (unauthoritative)


100%[=================================================================================================================================================================>] 272         --.-K/s   in 0.002s

2015-12-09 16:17:42 (175 KB/s) - `test.pem' saved [272]

但一直使用PASV，过一会儿又无法正常下载，再使用PORT下载后PASV又可下载！在192.168.10.2服务器上无法使用PASV还是PORT方式下载192.168.10.1服务器内容时，数据传输端口都是随机时且每次执行完后会有一个TIME_WAIT。之后再完全断开。

[root@localhost ~]# netstat -nap |grep 192.168.10.1
tcp        0      0 ::ffff:192.168.10.2:21        ::ffff:192.168.10.1:41915    ESTABLISHED 19973/java 
tcp        0      0 ::ffff:192.168.10.2:56549     ::ffff:192.168.10.1:36755    TIME_WAIT   -          
tcp        0      0 ::ffff:192.168.10.2:11788     ::ffff:192.168.10.1:36535    ESTABLISHED 19973/java 
[root@localhost ~]# netstat -nap |grep 192.168.10.1
tcp        0      0 ::ffff:192.168.10.2:11788     ::ffff:192.168.10.1:36535    TIME_WAIT   -