So, my company is moving to FTPS and there's a mix of both FTP and FTPS.
Both are ran on all sorts of ports (9999, or 4444 or whatever)

After I putty to an IP/port ...how do you know from the banner if you're looking at an FTP server, or an FTPS one?
If you can't tell from banner, is there a command that only one of them accepts that would help me determine?

Thanks,
~Syrinx

Its a little too much work but you can use wireshark to see if there's encryption between you and the server.

I think nmap should able to correctly detect the service that the port is running.

_________________
"It can also be argued that DNA is nothing more than a program designed to preserve itself. Life has become more complex in the overwhelming sea of information. And life, when organized into species, relies upon genes to be its memory system."

It's been a while, but I believe I was using the "status" command to verify encryption. You should also see it during initial negotiation (showing sslftp example):

sslftp> open myftpserver.com
Connected to myftpserver.com
220 SurgeFTP myftpserver.com (Version 2.1z7)
234 Enabling SSL
starting SSL/TLS
secure protocol TLSv1 used.

It should show it during the negotiation (as mlan states) and your client should also prompt you to accept the certificate presented by the FTPS server