The attached packet trace was collected on a Linux server.
# |
Taille |
Résumé |
État |
0 |
20 octets |
Transmission Control Protocol, Src Port: 39604, Dst Port: 22, Seq: 0, Len: 0 |
|
1 |
20 octets |
Transmission Control Protocol, Src Port: 22, Dst Port: 39604, Seq: 1, Ack: 1, Len: 0 |
|
2 |
20 octets |
Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 0, Len: 0 |
|
3 |
20 octets |
Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 0, Ack: 1, Len: 0 |
|
4 |
20 octets |
Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 1, Ack: 1, Len: 0 |
|
5 |
73 octets |
SSH Protocol |
|
6 |
20 octets |
Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 1, Ack: 42, Len: 0 |
|
7 |
73 octets |
SSH Protocol |
|
8 |
20 octets |
Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 42, Ack: 42, Len: 0 |
|
9 |
1392 octets |
SSH Protocol |
|
10 |
1112 octets |
SSH Protocol |
|
11 |
80 octets |
SSH Protocol |
|
12 |
484 octets |
SSH Protocol |
|
13 |
20 octets |
Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 1450, Ack: 1574, Len: 0 |
|
14 |
48 octets |
SSH Protocol |
|
15 |
20 octets |
Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 1574, Ack: 1466, Len: 0 |
|
16 |
76 octets |
SSH Protocol |
|
17 |
20 octets |
Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 1574, Ack: 1510, Len: 0 |
|
18 |
76 octets |
SSH Protocol |
|
19 |
20 octets |
Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 1510, Ack: 1618, Len: 0 |
|
20 |
92 octets |
SSH Protocol |
|
21 |
84 octets |
SSH Protocol |
|
22 |
404 octets |
SSH Protocol |
|
23 |
84 octets |
SSH Protocol |
|
24 |
20 octets |
Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 1942, Ack: 1722, Len: 0 |
|
25 |
116 octets |
SSH Protocol |
|
26 |
60 octets |
SSH Protocol |
|
27 |
20 octets |
Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 2026, Ack: 1750, Len: 0 |
|
28 |
144 octets |
SSH Protocol |
|
29 |
20 octets |
Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 1750, Ack: 2138, Len: 0 |
|
30 |
972 octets |
SSH Protocol |
|
31 |
20 octets |
Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 2138, Ack: 2690, Len: 0 |
|
32 |
76 octets |
SSH Protocol |
|
33 |
20 octets |
Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 2138, Ack: 2734, Len: 0 |
|
34 |
1128 octets |
SSH Protocol |
|
35 |
20 octets |
Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 2734, Ack: 3234, Len: 0 |
|
36 |
140 octets |
SSH Protocol |
|
37 |
484 octets |
SSH Protocol |
|
38 |
460 octets |
SSH Protocol |
|
39 |
20 octets |
Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3234, Ack: 3294, Len: 0 |
|
40 |
276 octets |
SSH Protocol |
|
41 |
20 octets |
Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3234, Ack: 3966, Len: 0 |
|
42 |
140 octets |
SSH Protocol |
|
43 |
20 octets |
Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3234, Ack: 4074, Len: 0 |
|
44 |
68 octets |
SSH Protocol |
|
45 |
68 octets |
SSH Protocol |
|
46 |
20 octets |
Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3270, Ack: 4110, Len: 0 |
|
47 |
68 octets |
SSH Protocol |
|
48 |
68 octets |
SSH Protocol |
|
49 |
20 octets |
Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3306, Ack: 4146, Len: 0 |
|
50 |
68 octets |
SSH Protocol |
|
51 |
68 octets |
SSH Protocol |
|
52 |
20 octets |
Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3342, Ack: 4182, Len: 0 |
|
53 |
68 octets |
SSH Protocol |
|
54 |
68 octets |
SSH Protocol |
|
55 |
20 octets |
Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3378, Ack: 4218, Len: 0 |
|
56 |
68 octets |
SSH Protocol |
|
57 |
68 octets |
SSH Protocol |
|
58 |
20 octets |
Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3414, Ack: 4254, Len: 0 |
|
59 |
76 octets |
SSH Protocol |
|
60 |
20 octets |
Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3414, Ack: 4298, Len: 0 |
|
61 |
208 octets |
SSH Protocol |
|
62 |
20 octets |
Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3414, Ack: 4474, Len: 0 |
|
63 |
68 octets |
SSH Protocol |
|
64 |
92 octets |
SSH Protocol |
|
65 |
20 octets |
Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3510, Ack: 4474, Len: 0 |
|
66 |
20 octets |
Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 4474, Ack: 3511, Len: 0 |
|
67 |
20 octets |
Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 4474, Ack: 3511, Len: 0 |
|
68 |
20 octets |
Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3511, Ack: 4475, Len: 0 |
|
0000
9a
b4
00
16
6b
ad
6e
3d
00
00
00
00
a0
00
aa
aa
0010
00
30
00
00
0000
.
´
.
.
k
.
n
=
.
.
.
.
.
.
ª
ª
0010
.
0
.
.
- Transmission Control Protocol, Src Port: 39604, Dst Port: 22, Seq: 0, Len: 0
- Source Port: 39604
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 0 (relative sequence number)
- Acknowledgment number: 0
- 1010 .... = Header Length: 40 bytes (10)
- Window size value: 43690
- Calculated window size: 43690
- Checksum: 0x0030 [unverified]
- Urgent pointer: 0
0000
00
16
9a
b4
00
00
00
00
6b
ad
6e
3e
50
00
00
00
0010
00
1c
00
00
0000
.
.
.
´
.
.
.
.
k
.
n
>
P
.
.
.
0010
.
.
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 39604, Seq: 1, Ack: 1, Len: 0
- Source Port: 22
- Destination Port: 39604
- TCP Segment Len: 0
- Sequence number: 1 (relative sequence number)
- Acknowledgment number: 1 (relative ack number)
- 0101 .... = Header Length: 20 bytes (5)
- Window size value: 0
- Calculated window size: 0
- Window size scaling factor: -1 (unknown)
- Checksum: 0x001c [unverified]
- Urgent pointer: 0
0000
9a
b8
00
16
95
5b
8a
00
00
00
00
00
a0
00
aa
aa
0010
00
30
00
00
0000
.
¸
.
.
.
[
.
.
.
.
.
.
.
.
ª
ª
0010
.
0
.
.
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 0, Len: 0
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 0 (relative sequence number)
- Acknowledgment number: 0
- 1010 .... = Header Length: 40 bytes (10)
- Window size value: 43690
- Calculated window size: 43690
- Checksum: 0x0030 [unverified]
- Urgent pointer: 0
0000
00
16
9a
b8
2c
9d
9d
f2
95
5b
8a
01
a0
00
aa
aa
0010
00
30
00
00
0000
.
.
.
¸
,
.
.
ò
.
[
.
.
.
.
ª
ª
0010
.
0
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 0, Ack: 1, Len: 0
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 0
- Sequence number: 0 (relative sequence number)
- Acknowledgment number: 1 (relative ack number)
- 1010 .... = Header Length: 40 bytes (10)
- Window size value: 43690
- Calculated window size: 43690
- Checksum: 0x0030 [unverified]
- Urgent pointer: 0
0000
9a
b8
00
16
95
5b
8a
01
2c
9d
9d
f3
80
00
01
56
0010
00
28
00
00
0000
.
¸
.
.
.
[
.
.
,
.
.
ó
.
.
.
V
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 1, Ack: 1, Len: 0
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 1 (relative sequence number)
- Acknowledgment number: 1 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 342
- Calculated window size: 43776
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
9a
b8
00
16
95
5b
8a
01
2c
9d
9d
f3
80
00
01
56
0010
00
51
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
53
53
48
2d
32
2e
30
2d
4f
70
65
6e
53
53
48
5f
0030
37
2e
36
70
31
20
55
62
75
6e
74
75
2d
34
75
62
0040
75
6e
74
75
30
2e
33
0d
0a
0000
.
¸
.
.
.
[
.
.
,
.
.
ó
.
.
.
V
0010
.
Q
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
S
S
H
-
2
.
0
-
O
p
e
n
S
S
H
_
0030
7
.
6
p
1
U
b
u
n
t
u
-
4
u
b
0040
u
n
t
u
0
.
3
.
.
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 1, Ack: 1, Len: 41
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 41
- Sequence number: 1 (relative sequence number)
- Acknowledgment number: 1 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 342
- Calculated window size: 43776
- Window size scaling factor: 128
- Checksum: 0x0051 [unverified]
- Urgent pointer: 0
- TCP payload (41 bytes)
- SSH Protocol
- Protocol: SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3
0000
00
16
9a
b8
2c
9d
9d
f3
95
5b
8a
2a
80
00
01
56
0010
00
28
00
00
0000
.
.
.
¸
,
.
.
ó
.
[
.
*
.
.
.
V
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 1, Ack: 42, Len: 0
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 0
- Sequence number: 1 (relative sequence number)
- Acknowledgment number: 42 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 342
- Calculated window size: 43776
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
9a
b8
2c
9d
9d
f3
95
5b
8a
2a
80
00
01
56
0010
00
51
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
53
53
48
2d
32
2e
30
2d
4f
70
65
6e
53
53
48
5f
0030
37
2e
36
70
31
20
55
62
75
6e
74
75
2d
34
75
62
0040
75
6e
74
75
30
2e
33
0d
0a
0000
.
.
.
¸
,
.
.
ó
.
[
.
*
.
.
.
V
0010
.
Q
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
S
S
H
-
2
.
0
-
O
p
e
n
S
S
H
_
0030
7
.
6
p
1
U
b
u
n
t
u
-
4
u
b
0040
u
n
t
u
0
.
3
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 1, Ack: 42, Len: 41
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 41
- Sequence number: 1 (relative sequence number)
- Acknowledgment number: 42 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 342
- Calculated window size: 43776
- Window size scaling factor: 128
- Checksum: 0x0051 [unverified]
- Urgent pointer: 0
- TCP payload (41 bytes)
- SSH Protocol
- Protocol: SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3
0000
9a
b8
00
16
95
5b
8a
2a
2c
9d
9e
1c
80
00
01
56
0010
00
28
00
00
0000
.
¸
.
.
.
[
.
*
,
.
.
.
.
.
.
V
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 42, Ack: 42, Len: 0
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 42 (relative sequence number)
- Acknowledgment number: 42 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 342
- Calculated window size: 43776
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
9a
b8
00
16
95
5b
8a
2a
2c
9d
9e
1c
80
00
01
56
0010
05
78
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
05
4c
05
14
ef
c6
f2
ef
18
38
0a
6f
9a
b9
0030
c1
56
f3
90
39
7f
00
00
01
30
63
75
72
76
65
32
0040
35
35
31
39
2d
73
68
61
32
35
36
2c
63
75
72
76
0050
65
32
35
35
31
39
2d
73
68
61
32
35
36
40
6c
69
0060
62
73
73
68
2e
6f
72
67
2c
65
63
64
68
2d
73
68
0070
61
32
2d
6e
69
73
74
70
32
35
36
2c
65
63
64
68
0080
2d
73
68
61
32
2d
6e
69
73
74
70
33
38
34
2c
65
0090
63
64
68
2d
73
68
61
32
2d
6e
69
73
74
70
35
32
00A0
31
2c
64
69
66
66
69
65
2d
68
65
6c
6c
6d
61
6e
00B0
2d
67
72
6f
75
70
2d
65
78
63
68
61
6e
67
65
2d
00C0
73
68
61
32
35
36
2c
64
69
66
66
69
65
2d
68
65
00D0
6c
6c
6d
61
6e
2d
67
72
6f
75
70
31
36
2d
73
68
00E0
61
35
31
32
2c
64
69
66
66
69
65
2d
68
65
6c
6c
00F0
6d
61
6e
2d
67
72
6f
75
70
31
38
2d
73
68
61
35
0100
31
32
2c
64
69
66
66
69
65
2d
68
65
6c
6c
6d
61
0110
6e
2d
67
72
6f
75
70
2d
65
78
63
68
61
6e
67
65
0120
2d
73
68
61
31
2c
64
69
66
66
69
65
2d
68
65
6c
0130
6c
6d
61
6e
2d
67
72
6f
75
70
31
34
2d
73
68
61
0140
32
35
36
2c
64
69
66
66
69
65
2d
68
65
6c
6c
6d
0150
61
6e
2d
67
72
6f
75
70
31
34
2d
73
68
61
31
2c
0160
65
78
74
2d
69
6e
66
6f
2d
63
00
00
01
22
65
63
0170
64
73
61
2d
73
68
61
32
2d
6e
69
73
74
70
32
35
0180
36
2d
63
65
72
74
2d
76
30
31
40
6f
70
65
6e
73
0190
73
68
2e
63
6f
6d
2c
65
63
64
73
61
2d
73
68
61
01A0
32
2d
6e
69
73
74
70
33
38
34
2d
63
65
72
74
2d
01B0
76
30
31
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
01C0
65
63
64
73
61
2d
73
68
61
32
2d
6e
69
73
74
70
01D0
35
32
31
2d
63
65
72
74
2d
76
30
31
40
6f
70
65
01E0
6e
73
73
68
2e
63
6f
6d
2c
73
73
68
2d
65
64
32
01F0
35
35
31
39
2d
63
65
72
74
2d
76
30
31
40
6f
70
0200
65
6e
73
73
68
2e
63
6f
6d
2c
73
73
68
2d
72
73
0210
61
2d
63
65
72
74
2d
76
30
31
40
6f
70
65
6e
73
0220
73
68
2e
63
6f
6d
2c
65
63
64
73
61
2d
73
68
61
0230
32
2d
6e
69
73
74
70
32
35
36
2c
65
63
64
73
61
0240
2d
73
68
61
32
2d
6e
69
73
74
70
33
38
34
2c
65
0250
63
64
73
61
2d
73
68
61
32
2d
6e
69
73
74
70
35
0260
32
31
2c
73
73
68
2d
65
64
32
35
35
31
39
2c
72
0270
73
61
2d
73
68
61
32
2d
35
31
32
2c
72
73
61
2d
0280
73
68
61
32
2d
32
35
36
2c
73
73
68
2d
72
73
61
0290
00
00
00
6c
63
68
61
63
68
61
32
30
2d
70
6f
6c
02A0
79
31
33
30
35
40
6f
70
65
6e
73
73
68
2e
63
6f
02B0
6d
2c
61
65
73
31
32
38
2d
63
74
72
2c
61
65
73
02C0
31
39
32
2d
63
74
72
2c
61
65
73
32
35
36
2d
63
02D0
74
72
2c
61
65
73
31
32
38
2d
67
63
6d
40
6f
70
02E0
65
6e
73
73
68
2e
63
6f
6d
2c
61
65
73
32
35
36
02F0
2d
67
63
6d
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
0300
00
00
00
6c
63
68
61
63
68
61
32
30
2d
70
6f
6c
0310
79
31
33
30
35
40
6f
70
65
6e
73
73
68
2e
63
6f
0320
6d
2c
61
65
73
31
32
38
2d
63
74
72
2c
61
65
73
0330
31
39
32
2d
63
74
72
2c
61
65
73
32
35
36
2d
63
0340
74
72
2c
61
65
73
31
32
38
2d
67
63
6d
40
6f
70
0350
65
6e
73
73
68
2e
63
6f
6d
2c
61
65
73
32
35
36
0360
2d
67
63
6d
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
0370
00
00
00
d5
75
6d
61
63
2d
36
34
2d
65
74
6d
40
0380
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
75
6d
61
63
0390
2d
31
32
38
2d
65
74
6d
40
6f
70
65
6e
73
73
68
03A0
2e
63
6f
6d
2c
68
6d
61
63
2d
73
68
61
32
2d
32
03B0
35
36
2d
65
74
6d
40
6f
70
65
6e
73
73
68
2e
63
03C0
6f
6d
2c
68
6d
61
63
2d
73
68
61
32
2d
35
31
32
03D0
2d
65
74
6d
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
03E0
2c
68
6d
61
63
2d
73
68
61
31
2d
65
74
6d
40
6f
03F0
70
65
6e
73
73
68
2e
63
6f
6d
2c
75
6d
61
63
2d
0400
36
34
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
75
0410
6d
61
63
2d
31
32
38
40
6f
70
65
6e
73
73
68
2e
0420
63
6f
6d
2c
68
6d
61
63
2d
73
68
61
32
2d
32
35
0430
36
2c
68
6d
61
63
2d
73
68
61
32
2d
35
31
32
2c
0440
68
6d
61
63
2d
73
68
61
31
00
00
00
d5
75
6d
61
0450
63
2d
36
34
2d
65
74
6d
40
6f
70
65
6e
73
73
68
0460
2e
63
6f
6d
2c
75
6d
61
63
2d
31
32
38
2d
65
74
0470
6d
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
68
6d
0480
61
63
2d
73
68
61
32
2d
32
35
36
2d
65
74
6d
40
0490
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
68
6d
61
63
04A0
2d
73
68
61
32
2d
35
31
32
2d
65
74
6d
40
6f
70
04B0
65
6e
73
73
68
2e
63
6f
6d
2c
68
6d
61
63
2d
73
04C0
68
61
31
2d
65
74
6d
40
6f
70
65
6e
73
73
68
2e
04D0
63
6f
6d
2c
75
6d
61
63
2d
36
34
40
6f
70
65
6e
04E0
73
73
68
2e
63
6f
6d
2c
75
6d
61
63
2d
31
32
38
04F0
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
68
6d
61
0500
63
2d
73
68
61
32
2d
32
35
36
2c
68
6d
61
63
2d
0510
73
68
61
32
2d
35
31
32
2c
68
6d
61
63
2d
73
68
0520
61
31
00
00
00
1a
6e
6f
6e
65
2c
7a
6c
69
62
40
0530
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
7a
6c
69
62
0540
00
00
00
1a
6e
6f
6e
65
2c
7a
6c
69
62
40
6f
70
0550
65
6e
73
73
68
2e
63
6f
6d
2c
7a
6c
69
62
00
00
0560
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0000
.
¸
.
.
.
[
.
*
,
.
.
.
.
.
.
V
0010
.
x
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
L
.
.
ï
Æ
ò
ï
.
8
.
o
.
¹
0030
Á
V
ó
.
9
.
.
.
.
0
c
u
r
v
e
2
0040
5
5
1
9
-
s
h
a
2
5
6
,
c
u
r
v
0050
e
2
5
5
1
9
-
s
h
a
2
5
6
@
l
i
0060
b
s
s
h
.
o
r
g
,
e
c
d
h
-
s
h
0070
a
2
-
n
i
s
t
p
2
5
6
,
e
c
d
h
0080
-
s
h
a
2
-
n
i
s
t
p
3
8
4
,
e
0090
c
d
h
-
s
h
a
2
-
n
i
s
t
p
5
2
00A0
1
,
d
i
f
f
i
e
-
h
e
l
l
m
a
n
00B0
-
g
r
o
u
p
-
e
x
c
h
a
n
g
e
-
00C0
s
h
a
2
5
6
,
d
i
f
f
i
e
-
h
e
00D0
l
l
m
a
n
-
g
r
o
u
p
1
6
-
s
h
00E0
a
5
1
2
,
d
i
f
f
i
e
-
h
e
l
l
00F0
m
a
n
-
g
r
o
u
p
1
8
-
s
h
a
5
0100
1
2
,
d
i
f
f
i
e
-
h
e
l
l
m
a
0110
n
-
g
r
o
u
p
-
e
x
c
h
a
n
g
e
0120
-
s
h
a
1
,
d
i
f
f
i
e
-
h
e
l
0130
l
m
a
n
-
g
r
o
u
p
1
4
-
s
h
a
0140
2
5
6
,
d
i
f
f
i
e
-
h
e
l
l
m
0150
a
n
-
g
r
o
u
p
1
4
-
s
h
a
1
,
0160
e
x
t
-
i
n
f
o
-
c
.
.
.
"
e
c
0170
d
s
a
-
s
h
a
2
-
n
i
s
t
p
2
5
0180
6
-
c
e
r
t
-
v
0
1
@
o
p
e
n
s
0190
s
h
.
c
o
m
,
e
c
d
s
a
-
s
h
a
01A0
2
-
n
i
s
t
p
3
8
4
-
c
e
r
t
-
01B0
v
0
1
@
o
p
e
n
s
s
h
.
c
o
m
,
01C0
e
c
d
s
a
-
s
h
a
2
-
n
i
s
t
p
01D0
5
2
1
-
c
e
r
t
-
v
0
1
@
o
p
e
01E0
n
s
s
h
.
c
o
m
,
s
s
h
-
e
d
2
01F0
5
5
1
9
-
c
e
r
t
-
v
0
1
@
o
p
0200
e
n
s
s
h
.
c
o
m
,
s
s
h
-
r
s
0210
a
-
c
e
r
t
-
v
0
1
@
o
p
e
n
s
0220
s
h
.
c
o
m
,
e
c
d
s
a
-
s
h
a
0230
2
-
n
i
s
t
p
2
5
6
,
e
c
d
s
a
0240
-
s
h
a
2
-
n
i
s
t
p
3
8
4
,
e
0250
c
d
s
a
-
s
h
a
2
-
n
i
s
t
p
5
0260
2
1
,
s
s
h
-
e
d
2
5
5
1
9
,
r
0270
s
a
-
s
h
a
2
-
5
1
2
,
r
s
a
-
0280
s
h
a
2
-
2
5
6
,
s
s
h
-
r
s
a
0290
.
.
.
l
c
h
a
c
h
a
2
0
-
p
o
l
02A0
y
1
3
0
5
@
o
p
e
n
s
s
h
.
c
o
02B0
m
,
a
e
s
1
2
8
-
c
t
r
,
a
e
s
02C0
1
9
2
-
c
t
r
,
a
e
s
2
5
6
-
c
02D0
t
r
,
a
e
s
1
2
8
-
g
c
m
@
o
p
02E0
e
n
s
s
h
.
c
o
m
,
a
e
s
2
5
6
02F0
-
g
c
m
@
o
p
e
n
s
s
h
.
c
o
m
0300
.
.
.
l
c
h
a
c
h
a
2
0
-
p
o
l
0310
y
1
3
0
5
@
o
p
e
n
s
s
h
.
c
o
0320
m
,
a
e
s
1
2
8
-
c
t
r
,
a
e
s
0330
1
9
2
-
c
t
r
,
a
e
s
2
5
6
-
c
0340
t
r
,
a
e
s
1
2
8
-
g
c
m
@
o
p
0350
e
n
s
s
h
.
c
o
m
,
a
e
s
2
5
6
0360
-
g
c
m
@
o
p
e
n
s
s
h
.
c
o
m
0370
.
.
.
Õ
u
m
a
c
-
6
4
-
e
t
m
@
0380
o
p
e
n
s
s
h
.
c
o
m
,
u
m
a
c
0390
-
1
2
8
-
e
t
m
@
o
p
e
n
s
s
h
03A0
.
c
o
m
,
h
m
a
c
-
s
h
a
2
-
2
03B0
5
6
-
e
t
m
@
o
p
e
n
s
s
h
.
c
03C0
o
m
,
h
m
a
c
-
s
h
a
2
-
5
1
2
03D0
-
e
t
m
@
o
p
e
n
s
s
h
.
c
o
m
03E0
,
h
m
a
c
-
s
h
a
1
-
e
t
m
@
o
03F0
p
e
n
s
s
h
.
c
o
m
,
u
m
a
c
-
0400
6
4
@
o
p
e
n
s
s
h
.
c
o
m
,
u
0410
m
a
c
-
1
2
8
@
o
p
e
n
s
s
h
.
0420
c
o
m
,
h
m
a
c
-
s
h
a
2
-
2
5
0430
6
,
h
m
a
c
-
s
h
a
2
-
5
1
2
,
0440
h
m
a
c
-
s
h
a
1
.
.
.
Õ
u
m
a
0450
c
-
6
4
-
e
t
m
@
o
p
e
n
s
s
h
0460
.
c
o
m
,
u
m
a
c
-
1
2
8
-
e
t
0470
m
@
o
p
e
n
s
s
h
.
c
o
m
,
h
m
0480
a
c
-
s
h
a
2
-
2
5
6
-
e
t
m
@
0490
o
p
e
n
s
s
h
.
c
o
m
,
h
m
a
c
04A0
-
s
h
a
2
-
5
1
2
-
e
t
m
@
o
p
04B0
e
n
s
s
h
.
c
o
m
,
h
m
a
c
-
s
04C0
h
a
1
-
e
t
m
@
o
p
e
n
s
s
h
.
04D0
c
o
m
,
u
m
a
c
-
6
4
@
o
p
e
n
04E0
s
s
h
.
c
o
m
,
u
m
a
c
-
1
2
8
04F0
@
o
p
e
n
s
s
h
.
c
o
m
,
h
m
a
0500
c
-
s
h
a
2
-
2
5
6
,
h
m
a
c
-
0510
s
h
a
2
-
5
1
2
,
h
m
a
c
-
s
h
0520
a
1
.
.
.
.
n
o
n
e
,
z
l
i
b
@
0530
o
p
e
n
s
s
h
.
c
o
m
,
z
l
i
b
0540
.
.
.
.
n
o
n
e
,
z
l
i
b
@
o
p
0550
e
n
s
s
h
.
c
o
m
,
z
l
i
b
.
.
0560
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 42, Ack: 42, Len: 1360
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 1360
- Sequence number: 42 (relative sequence number)
- Acknowledgment number: 42 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 342
- Calculated window size: 43776
- Window size scaling factor: 128
- Checksum: 0x0578 [unverified]
- Urgent pointer: 0
- TCP payload (1360 bytes)
- SSH Protocol
- SSH Version 2
- Packet Length: 1356
- Padding Length: 5
- Key Exchange
- Message Code: Key Exchange Init (20)
- Algorithms
- Cookie: efc6f2ef18380a6f9ab9c156f390397f
- kex_algorithms length: 304
- kex_algorithms string [truncated]: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,di
- server_host_key_algorithms length: 290
- server_host_key_algorithms string [truncated]: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ecdsa-
- encryption_algorithms_client_to_server length: 108
- encryption_algorithms_client_to_server string: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
- encryption_algorithms_server_to_client length: 108
- encryption_algorithms_server_to_client string: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
- mac_algorithms_client_to_server length: 213
- mac_algorithms_client_to_server string [truncated]: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-
- mac_algorithms_server_to_client length: 213
- mac_algorithms_server_to_client string [truncated]: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-
- compression_algorithms_client_to_server length: 26
- compression_algorithms_client_to_server string: none,zlib@openssh.com,zlib
- compression_algorithms_server_to_client length: 26
- compression_algorithms_server_to_client string: none,zlib@openssh.com,zlib
- languages_client_to_server length: 0
- languages_server_to_client length: 0
- First KEX Packet Follows: 0
- Reserved: 00000000
- Padding String: 0000000000
0000
00
16
9a
b8
2c
9d
9e
1c
95
5b
8f
7a
80
00
05
55
0010
04
60
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
04
34
06
14
25
9c
2d
96
51
53
f7
da
f7
85
0030
10
2d
91
42
2e
05
00
00
01
02
63
75
72
76
65
32
0040
35
35
31
39
2d
73
68
61
32
35
36
2c
63
75
72
76
0050
65
32
35
35
31
39
2d
73
68
61
32
35
36
40
6c
69
0060
62
73
73
68
2e
6f
72
67
2c
65
63
64
68
2d
73
68
0070
61
32
2d
6e
69
73
74
70
32
35
36
2c
65
63
64
68
0080
2d
73
68
61
32
2d
6e
69
73
74
70
33
38
34
2c
65
0090
63
64
68
2d
73
68
61
32
2d
6e
69
73
74
70
35
32
00A0
31
2c
64
69
66
66
69
65
2d
68
65
6c
6c
6d
61
6e
00B0
2d
67
72
6f
75
70
2d
65
78
63
68
61
6e
67
65
2d
00C0
73
68
61
32
35
36
2c
64
69
66
66
69
65
2d
68
65
00D0
6c
6c
6d
61
6e
2d
67
72
6f
75
70
31
36
2d
73
68
00E0
61
35
31
32
2c
64
69
66
66
69
65
2d
68
65
6c
6c
00F0
6d
61
6e
2d
67
72
6f
75
70
31
38
2d
73
68
61
35
0100
31
32
2c
64
69
66
66
69
65
2d
68
65
6c
6c
6d
61
0110
6e
2d
67
72
6f
75
70
31
34
2d
73
68
61
32
35
36
0120
2c
64
69
66
66
69
65
2d
68
65
6c
6c
6d
61
6e
2d
0130
67
72
6f
75
70
31
34
2d
73
68
61
31
00
00
00
41
0140
73
73
68
2d
72
73
61
2c
72
73
61
2d
73
68
61
32
0150
2d
35
31
32
2c
72
73
61
2d
73
68
61
32
2d
32
35
0160
36
2c
65
63
64
73
61
2d
73
68
61
32
2d
6e
69
73
0170
74
70
32
35
36
2c
73
73
68
2d
65
64
32
35
35
31
0180
39
00
00
00
6c
63
68
61
63
68
61
32
30
2d
70
6f
0190
6c
79
31
33
30
35
40
6f
70
65
6e
73
73
68
2e
63
01A0
6f
6d
2c
61
65
73
31
32
38
2d
63
74
72
2c
61
65
01B0
73
31
39
32
2d
63
74
72
2c
61
65
73
32
35
36
2d
01C0
63
74
72
2c
61
65
73
31
32
38
2d
67
63
6d
40
6f
01D0
70
65
6e
73
73
68
2e
63
6f
6d
2c
61
65
73
32
35
01E0
36
2d
67
63
6d
40
6f
70
65
6e
73
73
68
2e
63
6f
01F0
6d
00
00
00
6c
63
68
61
63
68
61
32
30
2d
70
6f
0200
6c
79
31
33
30
35
40
6f
70
65
6e
73
73
68
2e
63
0210
6f
6d
2c
61
65
73
31
32
38
2d
63
74
72
2c
61
65
0220
73
31
39
32
2d
63
74
72
2c
61
65
73
32
35
36
2d
0230
63
74
72
2c
61
65
73
31
32
38
2d
67
63
6d
40
6f
0240
70
65
6e
73
73
68
2e
63
6f
6d
2c
61
65
73
32
35
0250
36
2d
67
63
6d
40
6f
70
65
6e
73
73
68
2e
63
6f
0260
6d
00
00
00
d5
75
6d
61
63
2d
36
34
2d
65
74
6d
0270
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
75
6d
61
0280
63
2d
31
32
38
2d
65
74
6d
40
6f
70
65
6e
73
73
0290
68
2e
63
6f
6d
2c
68
6d
61
63
2d
73
68
61
32
2d
02A0
32
35
36
2d
65
74
6d
40
6f
70
65
6e
73
73
68
2e
02B0
63
6f
6d
2c
68
6d
61
63
2d
73
68
61
32
2d
35
31
02C0
32
2d
65
74
6d
40
6f
70
65
6e
73
73
68
2e
63
6f
02D0
6d
2c
68
6d
61
63
2d
73
68
61
31
2d
65
74
6d
40
02E0
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
75
6d
61
63
02F0
2d
36
34
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
0300
75
6d
61
63
2d
31
32
38
40
6f
70
65
6e
73
73
68
0310
2e
63
6f
6d
2c
68
6d
61
63
2d
73
68
61
32
2d
32
0320
35
36
2c
68
6d
61
63
2d
73
68
61
32
2d
35
31
32
0330
2c
68
6d
61
63
2d
73
68
61
31
00
00
00
d5
75
6d
0340
61
63
2d
36
34
2d
65
74
6d
40
6f
70
65
6e
73
73
0350
68
2e
63
6f
6d
2c
75
6d
61
63
2d
31
32
38
2d
65
0360
74
6d
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
68
0370
6d
61
63
2d
73
68
61
32
2d
32
35
36
2d
65
74
6d
0380
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
68
6d
61
0390
63
2d
73
68
61
32
2d
35
31
32
2d
65
74
6d
40
6f
03A0
70
65
6e
73
73
68
2e
63
6f
6d
2c
68
6d
61
63
2d
03B0
73
68
61
31
2d
65
74
6d
40
6f
70
65
6e
73
73
68
03C0
2e
63
6f
6d
2c
75
6d
61
63
2d
36
34
40
6f
70
65
03D0
6e
73
73
68
2e
63
6f
6d
2c
75
6d
61
63
2d
31
32
03E0
38
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
68
6d
03F0
61
63
2d
73
68
61
32
2d
32
35
36
2c
68
6d
61
63
0400
2d
73
68
61
32
2d
35
31
32
2c
68
6d
61
63
2d
73
0410
68
61
31
00
00
00
15
6e
6f
6e
65
2c
7a
6c
69
62
0420
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
00
00
00
15
0430
6e
6f
6e
65
2c
7a
6c
69
62
40
6f
70
65
6e
73
73
0440
68
2e
63
6f
6d
00
00
00
00
00
00
00
00
00
00
00
0450
00
00
00
00
00
00
00
00
0000
.
.
.
¸
,
.
.
.
.
[
.
z
.
.
.
U
0010
.
`
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
4
.
.
%
.
-
.
Q
S
÷
Ú
÷
.
0030
.
-
.
B
.
.
.
.
.
.
c
u
r
v
e
2
0040
5
5
1
9
-
s
h
a
2
5
6
,
c
u
r
v
0050
e
2
5
5
1
9
-
s
h
a
2
5
6
@
l
i
0060
b
s
s
h
.
o
r
g
,
e
c
d
h
-
s
h
0070
a
2
-
n
i
s
t
p
2
5
6
,
e
c
d
h
0080
-
s
h
a
2
-
n
i
s
t
p
3
8
4
,
e
0090
c
d
h
-
s
h
a
2
-
n
i
s
t
p
5
2
00A0
1
,
d
i
f
f
i
e
-
h
e
l
l
m
a
n
00B0
-
g
r
o
u
p
-
e
x
c
h
a
n
g
e
-
00C0
s
h
a
2
5
6
,
d
i
f
f
i
e
-
h
e
00D0
l
l
m
a
n
-
g
r
o
u
p
1
6
-
s
h
00E0
a
5
1
2
,
d
i
f
f
i
e
-
h
e
l
l
00F0
m
a
n
-
g
r
o
u
p
1
8
-
s
h
a
5
0100
1
2
,
d
i
f
f
i
e
-
h
e
l
l
m
a
0110
n
-
g
r
o
u
p
1
4
-
s
h
a
2
5
6
0120
,
d
i
f
f
i
e
-
h
e
l
l
m
a
n
-
0130
g
r
o
u
p
1
4
-
s
h
a
1
.
.
.
A
0140
s
s
h
-
r
s
a
,
r
s
a
-
s
h
a
2
0150
-
5
1
2
,
r
s
a
-
s
h
a
2
-
2
5
0160
6
,
e
c
d
s
a
-
s
h
a
2
-
n
i
s
0170
t
p
2
5
6
,
s
s
h
-
e
d
2
5
5
1
0180
9
.
.
.
l
c
h
a
c
h
a
2
0
-
p
o
0190
l
y
1
3
0
5
@
o
p
e
n
s
s
h
.
c
01A0
o
m
,
a
e
s
1
2
8
-
c
t
r
,
a
e
01B0
s
1
9
2
-
c
t
r
,
a
e
s
2
5
6
-
01C0
c
t
r
,
a
e
s
1
2
8
-
g
c
m
@
o
01D0
p
e
n
s
s
h
.
c
o
m
,
a
e
s
2
5
01E0
6
-
g
c
m
@
o
p
e
n
s
s
h
.
c
o
01F0
m
.
.
.
l
c
h
a
c
h
a
2
0
-
p
o
0200
l
y
1
3
0
5
@
o
p
e
n
s
s
h
.
c
0210
o
m
,
a
e
s
1
2
8
-
c
t
r
,
a
e
0220
s
1
9
2
-
c
t
r
,
a
e
s
2
5
6
-
0230
c
t
r
,
a
e
s
1
2
8
-
g
c
m
@
o
0240
p
e
n
s
s
h
.
c
o
m
,
a
e
s
2
5
0250
6
-
g
c
m
@
o
p
e
n
s
s
h
.
c
o
0260
m
.
.
.
Õ
u
m
a
c
-
6
4
-
e
t
m
0270
@
o
p
e
n
s
s
h
.
c
o
m
,
u
m
a
0280
c
-
1
2
8
-
e
t
m
@
o
p
e
n
s
s
0290
h
.
c
o
m
,
h
m
a
c
-
s
h
a
2
-
02A0
2
5
6
-
e
t
m
@
o
p
e
n
s
s
h
.
02B0
c
o
m
,
h
m
a
c
-
s
h
a
2
-
5
1
02C0
2
-
e
t
m
@
o
p
e
n
s
s
h
.
c
o
02D0
m
,
h
m
a
c
-
s
h
a
1
-
e
t
m
@
02E0
o
p
e
n
s
s
h
.
c
o
m
,
u
m
a
c
02F0
-
6
4
@
o
p
e
n
s
s
h
.
c
o
m
,
0300
u
m
a
c
-
1
2
8
@
o
p
e
n
s
s
h
0310
.
c
o
m
,
h
m
a
c
-
s
h
a
2
-
2
0320
5
6
,
h
m
a
c
-
s
h
a
2
-
5
1
2
0330
,
h
m
a
c
-
s
h
a
1
.
.
.
Õ
u
m
0340
a
c
-
6
4
-
e
t
m
@
o
p
e
n
s
s
0350
h
.
c
o
m
,
u
m
a
c
-
1
2
8
-
e
0360
t
m
@
o
p
e
n
s
s
h
.
c
o
m
,
h
0370
m
a
c
-
s
h
a
2
-
2
5
6
-
e
t
m
0380
@
o
p
e
n
s
s
h
.
c
o
m
,
h
m
a
0390
c
-
s
h
a
2
-
5
1
2
-
e
t
m
@
o
03A0
p
e
n
s
s
h
.
c
o
m
,
h
m
a
c
-
03B0
s
h
a
1
-
e
t
m
@
o
p
e
n
s
s
h
03C0
.
c
o
m
,
u
m
a
c
-
6
4
@
o
p
e
03D0
n
s
s
h
.
c
o
m
,
u
m
a
c
-
1
2
03E0
8
@
o
p
e
n
s
s
h
.
c
o
m
,
h
m
03F0
a
c
-
s
h
a
2
-
2
5
6
,
h
m
a
c
0400
-
s
h
a
2
-
5
1
2
,
h
m
a
c
-
s
0410
h
a
1
.
.
.
.
n
o
n
e
,
z
l
i
b
0420
@
o
p
e
n
s
s
h
.
c
o
m
.
.
.
.
0430
n
o
n
e
,
z
l
i
b
@
o
p
e
n
s
s
0440
h
.
c
o
m
.
.
.
.
.
.
.
.
.
.
.
0450
.
.
.
.
.
.
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 42, Ack: 1402, Len: 1080
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 1080
- Sequence number: 42 (relative sequence number)
- Acknowledgment number: 1402 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1365
- Calculated window size: 174720
- Window size scaling factor: 128
- Checksum: 0x0460 [unverified]
- Urgent pointer: 0
- TCP payload (1080 bytes)
- SSH Protocol
- SSH Version 2
- Packet Length: 1076
- Padding Length: 6
- Key Exchange
- Message Code: Key Exchange Init (20)
- Algorithms
- Cookie: 259c2d965153f7daf785102d91422e05
- kex_algorithms length: 258
- kex_algorithms string [truncated]: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,di
- server_host_key_algorithms length: 65
- server_host_key_algorithms string: ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519
- encryption_algorithms_client_to_server length: 108
- encryption_algorithms_client_to_server string: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
- encryption_algorithms_server_to_client length: 108
- encryption_algorithms_server_to_client string: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
- mac_algorithms_client_to_server length: 213
- mac_algorithms_client_to_server string [truncated]: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-
- mac_algorithms_server_to_client length: 213
- mac_algorithms_server_to_client string [truncated]: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-
- compression_algorithms_client_to_server length: 21
- compression_algorithms_client_to_server string: none,zlib@openssh.com
- compression_algorithms_server_to_client length: 21
- compression_algorithms_server_to_client string: none,zlib@openssh.com
- languages_client_to_server length: 0
- languages_server_to_client length: 0
- First KEX Packet Follows: 0
- Reserved: 00000000
- Padding String: 000000000000
0000
9a
b8
00
16
95
5b
8f
7a
2c
9d
a2
54
80
00
01
67
0010
00
58
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
00
2c
06
1e
00
00
00
20
cb
f6
68
37
42
5c
0030
72
e2
fb
f3
00
7a
26
93
8a
a2
c8
30
73
53
20
4a
0040
9a
dd
0b
06
c7
19
35
d1
95
0f
00
00
00
00
00
00
0000
.
¸
.
.
.
[
.
z
,
.
¢
T
.
.
.
g
0010
.
X
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
,
.
.
.
.
.
Ë
ö
h
7
B
\
0030
r
â
û
ó
.
z
&
.
.
¢
È
0
s
S
J
0040
.
Ý
.
.
Ç
.
5
Ñ
.
.
.
.
.
.
.
.
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 1402, Ack: 1122, Len: 48
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 48
- Sequence number: 1402 (relative sequence number)
- Acknowledgment number: 1122 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 359
- Calculated window size: 45952
- Window size scaling factor: 128
- Checksum: 0x0058 [unverified]
- Urgent pointer: 0
- TCP payload (48 bytes)
- SSH Protocol
- SSH Version 2
- Packet Length: 44
- Padding Length: 6
- Key Exchange
- Message Code: Diffie-Hellman Key Exchange Init (30)
- Multi Precision Integer Length: 32
- DH client e: cbf66837425c72e2fbf3007a26938aa2c8307353204a9add...
- Padding String: 000000000000
0000
00
16
9a
b8
2c
9d
a2
54
95
5b
8f
aa
80
00
05
55
0010
01
ec
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
01
04
0a
1f
00
00
00
68
00
00
00
13
65
63
0030
64
73
61
2d
73
68
61
32
2d
6e
69
73
74
70
32
35
0040
36
00
00
00
08
6e
69
73
74
70
32
35
36
00
00
00
0050
41
04
13
78
67
bd
71
5d
44
ac
fd
00
d6
aa
2a
ac
0060
a0
35
a3
26
f9
00
74
41
36
ef
28
a6
45
61
10
54
0070
ac
c8
b6
ac
57
91
22
93
9a
ae
25
2f
40
98
03
bb
0080
fe
8e
2c
dc
83
ee
fe
d2
e9
1a
5d
7c
ed
f8
87
ea
0090
c5
e8
00
00
00
20
e3
b8
6a
89
62
94
fe
7f
52
98
00A0
52
64
a7
16
2e
f5
e5
f4
70
41
88
70
81
a1
ab
86
00B0
08
48
db
2c
c4
0d
00
00
00
64
00
00
00
13
65
63
00C0
64
73
61
2d
73
68
61
32
2d
6e
69
73
74
70
32
35
00D0
36
00
00
00
49
00
00
00
20
48
eb
50
74
b0
b7
61
00E0
3e
1c
76
10
0c
22
e4
19
f8
50
86
e8
61
b0
0c
d7
00F0
bc
ef
b2
02
a6
ba
8c
81
65
00
00
00
21
00
da
4f
0100
1a
99
41
88
93
12
3f
8f
2e
f2
22
d3
49
19
6d
8e
0110
c1
b0
a6
f5
7b
d9
d4
eb
d4
ed
bd
9c
5c
17
00
00
0120
00
00
00
00
00
00
00
00
00
00
00
0c
0a
15
00
00
0130
00
00
00
00
00
00
00
00
44
34
4d
c7
3c
9a
8a
b4
0140
f5
f3
25
bb
93
7e
dc
0a
2c
78
b4
b7
ee
63
72
e9
0150
79
9e
a9
52
93
4e
46
ae
13
3f
e4
1f
24
dc
79
f1
0160
5c
3d
59
3e
cb
af
5e
bc
83
34
48
42
6b
4b
da
95
0170
50
36
f7
bc
2f
d8
fe
52
bf
3b
9d
30
4c
bb
70
7c
0180
51
fc
73
04
c3
9f
c1
f8
ff
4b
41
cc
3c
3d
22
b6
0190
cf
db
32
8b
b6
67
56
56
79
15
c9
62
b3
a0
49
b7
01A0
db
ca
54
3b
8c
81
3d
35
8a
ea
c6
55
97
15
f1
9e
01B0
1d
5c
91
b1
bc
06
ee
c1
04
7e
c6
42
a7
ce
29
16
01C0
ff
1f
fb
31
ae
b7
b5
c3
6c
cc
fa
1c
2f
d9
fe
36
01D0
c8
f5
67
bd
e1
46
ef
fa
c2
dc
da
ea
23
bd
71
9b
01E0
6f
7d
99
f8
0000
.
.
.
¸
,
.
¢
T
.
[
.
ª
.
.
.
U
0010
.
ì
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
.
.
.
.
.
.
h
.
.
.
.
e
c
0030
d
s
a
-
s
h
a
2
-
n
i
s
t
p
2
5
0040
6
.
.
.
.
n
i
s
t
p
2
5
6
.
.
.
0050
A
.
.
x
g
½
q
]
D
¬
ý
.
Ö
ª
*
¬
0060
.
5
£
&
ù
.
t
A
6
ï
(
¦
E
a
.
T
0070
¬
È
¶
¬
W
.
"
.
.
®
%
/
@
.
.
»
0080
þ
.
,
Ü
.
î
þ
Ò
é
.
]
|
í
ø
.
ê
0090
Å
è
.
.
.
ã
¸
j
.
b
.
þ
.
R
.
00A0
R
d
§
.
.
õ
å
ô
p
A
.
p
.
¡
«
.
00B0
.
H
Û
,
Ä
.
.
.
.
d
.
.
.
.
e
c
00C0
d
s
a
-
s
h
a
2
-
n
i
s
t
p
2
5
00D0
6
.
.
.
I
.
.
.
H
ë
P
t
°
·
a
00E0
>
.
v
.
.
"
ä
.
ø
P
.
è
a
°
.
×
00F0
¼
ï
²
.
¦
º
.
.
e
.
.
.
!
.
Ú
O
0100
.
.
A
.
.
.
?
.
.
ò
"
Ó
I
.
m
.
0110
Á
°
¦
õ
{
Ù
Ô
ë
Ô
í
½
.
\
.
.
.
0120
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0130
.
.
.
.
.
.
.
.
D
4
M
Ç
<
.
.
´
0140
õ
ó
%
»
.
~
Ü
.
,
x
´
·
î
c
r
é
0150
y
.
©
R
.
N
F
®
.
?
ä
.
$
Ü
y
ñ
0160
\
=
Y
>
Ë
¯
^
¼
.
4
H
B
k
K
Ú
.
0170
P
6
÷
¼
/
Ø
þ
R
¿
;
.
0
L
»
p
|
0180
Q
ü
s
.
Ã
.
Á
ø
ÿ
K
A
Ì
<
=
"
¶
0190
Ï
Û
2
.
¶
g
V
V
y
.
É
b
³
.
I
·
01A0
Û
Ê
T
;
.
.
=
5
.
ê
Æ
U
.
.
ñ
.
01B0
.
\
.
±
¼
.
î
Á
.
~
Æ
B
§
Î
)
.
01C0
ÿ
.
û
1
®
·
µ
Ã
l
Ì
ú
.
/
Ù
þ
6
01D0
È
õ
g
½
á
F
ï
ú
Â
Ü
Ú
ê
#
½
q
.
01E0
o
}
.
ø
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 1122, Ack: 1450, Len: 452
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 452
- Sequence number: 1122 (relative sequence number)
- Acknowledgment number: 1450 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1365
- Calculated window size: 174720
- Window size scaling factor: 128
- Checksum: 0x01ec [unverified]
- Urgent pointer: 0
- TCP payload (452 bytes)
- SSH Protocol
- SSH Version 2
- Packet Length: 260
- Padding Length: 10
- Key Exchange
- Message Code: Diffie-Hellman Key Exchange Reply (31)
- KEX host key (type: ecdsa-sha2-nistp256)
- Host key length: 104
- Host key type: ecdsa-sha2-nistp256
- ECDSA elliptic curve identifier length: 8
- ECDSA elliptic curve identifier: nistp256
- ECDSA public key length: 65
- ECDSA public key (Q): 04137867bd715d44acfd00d6aa2aaca035a326f900744136...
- Multi Precision Integer Length: 32
- DH server f: e3b86a896294fe7f52985264a7162ef5e5f47041887081a1...
- KEX H signature length: 100
- KEX H signature: 0000001365636473612d736861322d6e6973747032353600...
- Padding String: 00000000000000000000
- SSH Version 2
- Packet Length: 12
- Padding Length: 10
- Key Exchange
- Message Code: New Keys (21)
- Padding String: 00000000000000000000
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): 44344dc7
- Encrypted Packet: 3c9a8ab4f5f325bb937edc0a2c78b4b7ee6372e9799ea952...
- MAC: e146effac2dcdaea23bd719b6f7d99f8
0000
9a
b8
00
16
95
5b
8f
aa
2c
9d
a4
18
80
00
01
78
0010
00
28
00
00
0000
.
¸
.
.
.
[
.
ª
,
.
¤
.
.
.
.
x
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 1450, Ack: 1574, Len: 0
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 1450 (relative sequence number)
- Acknowledgment number: 1574 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 376
- Calculated window size: 48128
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
9a
b8
00
16
95
5b
8f
aa
2c
9d
a4
18
80
00
01
78
0010
00
38
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
00
0c
0a
15
00
00
00
00
00
00
00
00
00
00
0000
.
¸
.
.
.
[
.
ª
,
.
¤
.
.
.
.
x
0010
.
8
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 1450, Ack: 1574, Len: 16
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 16
- Sequence number: 1450 (relative sequence number)
- Acknowledgment number: 1574 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 376
- Calculated window size: 48128
- Window size scaling factor: 128
- Checksum: 0x0038 [unverified]
- Urgent pointer: 0
- TCP payload (16 bytes)
- SSH Protocol
- SSH Version 2
- Packet Length: 12
- Padding Length: 10
- Key Exchange
- Message Code: New Keys (21)
- Padding String: 00000000000000000000
0000
00
16
9a
b8
2c
9d
a4
18
95
5b
8f
ba
80
00
05
55
0010
00
28
00
00
0000
.
.
.
¸
,
.
¤
.
.
[
.
º
.
.
.
U
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 1574, Ack: 1466, Len: 0
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 0
- Sequence number: 1574 (relative sequence number)
- Acknowledgment number: 1466 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1365
- Calculated window size: 174720
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
9a
b8
00
16
95
5b
8f
ba
2c
9d
a4
18
80
00
01
78
0010
00
54
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
aa
6c
09
90
5d
31
20
00
38
b2
76
55
15
ed
81
40
0030
ef
b3
dd
85
8d
f2
9f
bd
46
67
ed
ed
9d
29
54
d5
0040
9a
95
cd
d7
6d
20
6e
c3
b3
6c
e4
29
0000
.
¸
.
.
.
[
.
º
,
.
¤
.
.
.
.
x
0010
.
T
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
ª
l
.
.
]
1
.
8
²
v
U
.
í
.
@
0030
ï
³
Ý
.
.
ò
.
½
F
g
í
í
.
)
T
Õ
0040
.
.
Í
×
m
n
Ã
³
l
ä
)
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 1466, Ack: 1574, Len: 44
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 44
- Sequence number: 1466 (relative sequence number)
- Acknowledgment number: 1574 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 376
- Calculated window size: 48128
- Window size scaling factor: 128
- Checksum: 0x0054 [unverified]
- Urgent pointer: 0
- TCP payload (44 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): aa6c0990
- Encrypted Packet: 5d31200038b2765515ed8140efb3dd858df29fbd4667eded
- MAC: 9d2954d59a95cdd76d206ec3b36ce429
0000
00
16
9a
b8
2c
9d
a4
18
95
5b
8f
e6
80
00
05
55
0010
00
28
00
00
0000
.
.
.
¸
,
.
¤
.
.
[
.
æ
.
.
.
U
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 1574, Ack: 1510, Len: 0
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 0
- Sequence number: 1574 (relative sequence number)
- Acknowledgment number: 1510 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1365
- Calculated window size: 174720
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
9a
b8
2c
9d
a4
18
95
5b
8f
e6
80
00
05
55
0010
00
54
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
bb
2e
1d
a7
99
a8
a6
5a
8e
2f
cd
ca
f4
79
d3
79
0030
1c
af
d6
45
bf
63
c0
82
15
54
6d
30
6f
c7
b5
49
0040
9e
f5
91
89
37
86
dd
d0
6e
47
9c
a9
0000
.
.
.
¸
,
.
¤
.
.
[
.
æ
.
.
.
U
0010
.
T
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
»
.
.
§
.
¨
¦
Z
.
/
Í
Ê
ô
y
Ó
y
0030
.
¯
Ö
E
¿
c
À
.
.
T
m
0
o
Ç
µ
I
0040
.
õ
.
.
7
.
Ý
Ð
n
G
.
©
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 1574, Ack: 1510, Len: 44
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 44
- Sequence number: 1574 (relative sequence number)
- Acknowledgment number: 1510 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1365
- Calculated window size: 174720
- Window size scaling factor: 128
- Checksum: 0x0054 [unverified]
- Urgent pointer: 0
- TCP payload (44 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): bb2e1da7
- Encrypted Packet: 99a8a65a8e2fcdcaf479d3791cafd645bf63c08215546d30
- MAC: 6fc7b5499ef591893786ddd06e479ca9
0000
9a
b8
00
16
95
5b
8f
e6
2c
9d
a4
44
80
00
01
78
0010
00
28
00
00
0000
.
¸
.
.
.
[
.
æ
,
.
¤
D
.
.
.
x
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 1510, Ack: 1618, Len: 0
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 1510 (relative sequence number)
- Acknowledgment number: 1618 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 376
- Calculated window size: 48128
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
9a
b8
00
16
95
5b
8f
e6
2c
9d
a4
44
80
00
01
78
0010
00
64
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
2c
cb
1e
ad
3f
53
91
c5
4c
0a
90
b9
94
fb
be
3f
0030
d6
b2
8a
24
16
90
40
b2
4b
89
7a
b9
a8
dd
e1
c1
0040
0b
11
5c
c9
68
fd
d6
2d
d1
6b
98
8d
b2
1c
f9
9d
0050
0a
b3
ad
e9
fe
e2
1b
8a
9c
55
12
fe
0000
.
¸
.
.
.
[
.
æ
,
.
¤
D
.
.
.
x
0010
.
d
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
,
Ë
.
.
?
S
.
Å
L
.
.
¹
.
û
¾
?
0030
Ö
²
.
$
.
.
@
²
K
.
z
¹
¨
Ý
á
Á
0040
.
.
\
É
h
ý
Ö
-
Ñ
k
.
.
²
.
ù
.
0050
.
³
.
é
þ
â
.
.
.
U
.
þ
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 1510, Ack: 1618, Len: 60
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 60
- Sequence number: 1510 (relative sequence number)
- Acknowledgment number: 1618 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 376
- Calculated window size: 48128
- Window size scaling factor: 128
- Checksum: 0x0064 [unverified]
- Urgent pointer: 0
- TCP payload (60 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): 2ccb1ead
- Encrypted Packet: 3f5391c54c0a90b994fbbe3fd6b28a24169040b24b897ab9...
- MAC: b21cf99d0ab3ade9fee21b8a9c5512fe
0000
00
16
9a
b8
2c
9d
a4
44
95
5b
90
22
80
00
05
55
0010
00
5c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
28
52
54
a9
e0
c8
0c
16
bd
48
e8
e0
cd
a2
52
25
0030
f5
91
fa
b3
07
af
ae
d3
4f
91
5b
b2
fa
e5
6f
f1
0040
81
a2
db
5b
79
17
a6
ad
8e
ff
c3
98
a2
e6
d9
da
0050
5f
bd
2a
66
0000
.
.
.
¸
,
.
¤
D
.
[
.
"
.
.
.
U
0010
.
\
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
(
R
T
©
à
È
.
.
½
H
è
à
Í
¢
R
%
0030
õ
.
ú
³
.
¯
®
Ó
O
.
[
²
ú
å
o
ñ
0040
.
¢
Û
[
y
.
¦
.
.
ÿ
Ã
.
¢
æ
Ù
Ú
0050
_
½
*
f
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 1618, Ack: 1570, Len: 52
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 52
- Sequence number: 1618 (relative sequence number)
- Acknowledgment number: 1570 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1365
- Calculated window size: 174720
- Window size scaling factor: 128
- Checksum: 0x005c [unverified]
- Urgent pointer: 0
- TCP payload (52 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): 285254a9
- Encrypted Packet: e0c80c16bd48e8e0cda25225f591fab307afaed34f915bb2...
- MAC: 7917a6ad8effc398a2e6d9da5fbd2a66
0000
9a
b8
00
16
95
5b
90
22
2c
9d
a4
78
80
00
01
78
0010
01
9c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
bd
eb
26
c3
19
04
d9
c5
45
a8
6d
c5
ca
7a
df
bd
0030
f1
16
5f
ca
54
cb
b7
0a
c4
bd
e3
38
d1
23
ca
ef
0040
e3
e7
84
15
99
b6
28
7b
f7
42
e6
1f
b6
c4
dd
a0
0050
33
67
91
60
8a
e6
b4
8a
d4
95
b3
14
2e
01
01
5e
0060
be
2e
65
48
6e
5e
57
3c
02
96
20
f0
43
02
7e
37
0070
0f
e6
85
50
df
5a
e3
1e
91
a7
83
86
1b
ae
8d
63
0080
e7
d4
8a
cc
22
9c
34
b9
86
0e
69
41
eb
b9
f4
72
0090
61
ad
e5
0b
91
f9
ad
b8
65
36
d0
5b
0e
f8
68
90
00A0
08
ef
b6
95
45
7e
bd
d2
a9
4c
48
8b
28
a4
0d
f5
00B0
6f
91
80
67
38
bf
8b
7b
94
75
97
84
39
4a
0d
43
00C0
94
0f
d0
82
69
20
56
04
88
36
ac
c5
67
8a
24
55
00D0
d6
a2
95
45
fb
32
b8
b5
75
80
dd
e8
ac
e7
9c
50
00E0
89
46
a5
87
3c
d3
a2
67
eb
f6
56
7a
b6
1a
40
11
00F0
72
e7
6a
aa
ef
c2
ea
1d
63
57
e7
25
58
9f
85
8f
0100
ac
5c
76
27
52
83
43
2d
81
1e
d8
8e
0f
2a
85
28
0110
c6
93
20
68
34
89
69
99
20
19
da
39
bf
81
03
a4
0120
3d
c3
b2
f5
18
be
bd
9a
58
2b
ec
7d
ed
d5
fa
78
0130
9b
7a
97
cf
8d
72
28
96
da
9c
ef
1d
9f
b0
9a
fc
0140
f9
2c
96
a7
cf
1b
76
4d
3d
f6
43
18
f4
f3
e9
e0
0150
ef
3b
da
6d
5b
fb
d1
d9
d3
e5
28
50
2d
0b
70
c4
0160
6d
f3
b5
2c
2c
a3
92
6b
36
b7
09
51
f0
e5
77
20
0170
bc
bb
33
6a
cb
f0
1e
14
18
5f
0b
ee
2d
9e
a3
27
0180
cd
fc
a3
e6
7a
94
db
eb
b2
39
e6
2e
83
f4
21
7f
0190
e1
e5
29
36
0000
.
¸
.
.
.
[
.
"
,
.
¤
x
.
.
.
x
0010
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
½
ë
&
Ã
.
.
Ù
Å
E
¨
m
Å
Ê
z
ß
½
0030
ñ
.
_
Ê
T
Ë
·
.
Ä
½
ã
8
Ñ
#
Ê
ï
0040
ã
ç
.
.
.
¶
(
{
÷
B
æ
.
¶
Ä
Ý
.
0050
3
g
.
`
.
æ
´
.
Ô
.
³
.
.
.
.
^
0060
¾
.
e
H
n
^
W
<
.
.
ð
C
.
~
7
0070
.
æ
.
P
ß
Z
ã
.
.
§
.
.
.
®
.
c
0080
ç
Ô
.
Ì
"
.
4
¹
.
.
i
A
ë
¹
ô
r
0090
a
.
å
.
.
ù
.
¸
e
6
Ð
[
.
ø
h
.
00A0
.
ï
¶
.
E
~
½
Ò
©
L
H
.
(
¤
.
õ
00B0
o
.
.
g
8
¿
.
{
.
u
.
.
9
J
.
C
00C0
.
.
Ð
.
i
V
.
.
6
¬
Å
g
.
$
U
00D0
Ö
¢
.
E
û
2
¸
µ
u
.
Ý
è
¬
ç
.
P
00E0
.
F
¥
.
<
Ó
¢
g
ë
ö
V
z
¶
.
@
.
00F0
r
ç
j
ª
ï
Â
ê
.
c
W
ç
%
X
.
.
.
0100
¬
\
v
'
R
.
C
-
.
.
Ø
.
.
*
.
(
0110
Æ
.
h
4
.
i
.
.
Ú
9
¿
.
.
¤
0120
=
Ã
²
õ
.
¾
½
.
X
+
ì
}
í
Õ
ú
x
0130
.
z
.
Ï
.
r
(
.
Ú
.
ï
.
.
°
.
ü
0140
ù
,
.
§
Ï
.
v
M
=
ö
C
.
ô
ó
é
à
0150
ï
;
Ú
m
[
û
Ñ
Ù
Ó
å
(
P
-
.
p
Ä
0160
m
ó
µ
,
,
£
.
k
6
·
.
Q
ð
å
w
0170
¼
»
3
j
Ë
ð
.
.
.
_
.
î
-
.
£
'
0180
Í
ü
£
æ
z
.
Û
ë
²
9
æ
.
.
ô
!
.
0190
á
å
)
6
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 1570, Ack: 1670, Len: 372
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 372
- Sequence number: 1570 (relative sequence number)
- Acknowledgment number: 1670 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 376
- Calculated window size: 48128
- Window size scaling factor: 128
- Checksum: 0x019c [unverified]
- Urgent pointer: 0
- TCP payload (372 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): bdeb26c3
- Encrypted Packet: 1904d9c545a86dc5ca7adfbdf1165fca54cbb70ac4bde338...
- MAC: 7a94dbebb239e62e83f4217fe1e52936
0000
00
16
9a
b8
2c
9d
a4
78
95
5b
91
96
80
00
05
6a
0010
00
5c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
2d
9e
f2
1c
29
dc
9e
f4
56
27
5a
7b
47
6f
a8
05
0030
45
18
c9
5a
1a
6a
d1
2e
28
f2
11
1e
52
33
21
5f
0040
98
08
9a
14
5e
20
a0
18
07
03
fa
ac
c8
37
e9
6a
0050
df
d0
a0
8e
0000
.
.
.
¸
,
.
¤
x
.
[
.
.
.
.
.
j
0010
.
\
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
-
.
ò
.
)
Ü
.
ô
V
'
Z
{
G
o
¨
.
0030
E
.
É
Z
.
j
Ñ
.
(
ò
.
.
R
3
!
_
0040
.
.
.
.
^
.
.
.
.
ú
¬
È
7
é
j
0050
ß
Ð
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 1670, Ack: 1942, Len: 52
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 52
- Sequence number: 1670 (relative sequence number)
- Acknowledgment number: 1942 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1386
- Calculated window size: 177408
- Window size scaling factor: 128
- Checksum: 0x005c [unverified]
- Urgent pointer: 0
- TCP payload (52 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): 2d9ef21c
- Encrypted Packet: 29dc9ef456275a7b476fa8054518c95a1a6ad12e28f2111e...
- MAC: 5e20a0180703faacc837e96adfd0a08e
0000
9a
b8
00
16
95
5b
91
96
2c
9d
a4
ac
80
00
01
78
0010
00
28
00
00
0000
.
¸
.
.
.
[
.
.
,
.
¤
¬
.
.
.
x
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 1942, Ack: 1722, Len: 0
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 1942 (relative sequence number)
- Acknowledgment number: 1722 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 376
- Calculated window size: 48128
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
9a
b8
00
16
95
5b
91
96
2c
9d
a4
ac
80
00
01
78
0010
00
7c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
76
3d
ef
f7
e5
41
b2
48
37
44
71
6f
76
33
dd
d9
0030
72
34
87
c8
44
5d
41
a1
9e
3d
2e
6f
00
95
07
6c
0040
d6
8a
02
de
64
ca
1a
22
71
bf
93
ef
92
cd
1a
d4
0050
93
ce
c5
89
2f
a1
92
fa
5a
5f
10
9e
ec
23
69
9c
0060
ed
cd
49
8a
e3
ae
3e
8b
5a
3b
bd
72
c6
32
cb
f1
0070
2c
f7
d9
8e
0000
.
¸
.
.
.
[
.
.
,
.
¤
¬
.
.
.
x
0010
.
|
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
v
=
ï
÷
å
A
²
H
7
D
q
o
v
3
Ý
Ù
0030
r
4
.
È
D
]
A
¡
.
=
.
o
.
.
.
l
0040
Ö
.
.
Þ
d
Ê
.
"
q
¿
.
ï
.
Í
.
Ô
0050
.
Î
Å
.
/
¡
.
ú
Z
_
.
.
ì
#
i
.
0060
í
Í
I
.
ã
®
>
.
Z
;
½
r
Æ
2
Ë
ñ
0070
,
÷
Ù
.
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 1942, Ack: 1722, Len: 84
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 84
- Sequence number: 1942 (relative sequence number)
- Acknowledgment number: 1722 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 376
- Calculated window size: 48128
- Window size scaling factor: 128
- Checksum: 0x007c [unverified]
- Urgent pointer: 0
- TCP payload (84 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): 763deff7
- Encrypted Packet: e541b2483744716f7633ddd9723487c8445d41a19e3d2e6f...
- MAC: e3ae3e8b5a3bbd72c632cbf12cf7d98e
0000
00
16
9a
b8
2c
9d
a4
ac
95
5b
91
ea
80
00
05
6a
0010
00
44
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
79
73
c5
a6
ea
88
1f
08
30
e1
82
2f
9c
01
82
2b
0030
fa
6b
db
d2
fb
cf
b2
ff
df
7f
55
db
0000
.
.
.
¸
,
.
¤
¬
.
[
.
ê
.
.
.
j
0010
.
D
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
y
s
Å
¦
ê
.
.
.
0
á
.
/
.
.
.
+
0030
ú
k
Û
Ò
û
Ï
²
ÿ
ß
.
U
Û
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 1722, Ack: 2026, Len: 28
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 28
- Sequence number: 1722 (relative sequence number)
- Acknowledgment number: 2026 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1386
- Calculated window size: 177408
- Window size scaling factor: 128
- Checksum: 0x0044 [unverified]
- Urgent pointer: 0
- TCP payload (28 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): 7973c5a6
- Encrypted Packet: ea881f0830e1822f
- MAC: 9c01822bfa6bdbd2fbcfb2ffdf7f55db
0000
9a
b8
00
16
95
5b
91
ea
2c
9d
a4
c8
80
00
01
78
0010
00
28
00
00
0000
.
¸
.
.
.
[
.
ê
,
.
¤
È
.
.
.
x
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 2026, Ack: 1750, Len: 0
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 2026 (relative sequence number)
- Acknowledgment number: 1750 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 376
- Calculated window size: 48128
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
9a
b8
00
16
95
5b
91
ea
2c
9d
a4
c8
80
00
01
78
0010
00
98
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
17
14
47
ca
21
bc
9f
30
5e
07
b9
0c
a6
5e
45
f4
0030
c4
35
16
ad
e4
07
71
1c
6e
61
67
94
63
7e
4a
e5
0040
71
e6
de
8f
2f
d6
17
8e
4f
89
2a
bf
ea
6e
43
23
0050
5b
a0
34
85
76
b2
d1
bc
6e
b2
f7
d4
b5
12
b8
db
0060
df
d4
6a
97
03
1f
ef
1b
cd
c8
87
8b
48
44
51
3e
0070
85
7c
06
6d
4f
6e
4c
fd
7f
ff
d9
d3
6d
e6
24
97
0080
3c
6a
fd
ba
44
76
de
c9
f8
9e
af
65
33
7d
67
bb
0000
.
¸
.
.
.
[
.
ê
,
.
¤
È
.
.
.
x
0010
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
G
Ê
!
¼
.
0
^
.
¹
.
¦
^
E
ô
0030
Ä
5
.
.
ä
.
q
.
n
a
g
.
c
~
J
å
0040
q
æ
Þ
.
/
Ö
.
.
O
.
*
¿
ê
n
C
#
0050
[
.
4
.
v
²
Ñ
¼
n
²
÷
Ô
µ
.
¸
Û
0060
ß
Ô
j
.
.
.
ï
.
Í
È
.
.
H
D
Q
>
0070
.
|
.
m
O
n
L
ý
.
ÿ
Ù
Ó
m
æ
$
.
0080
<
j
ý
º
D
v
Þ
É
ø
.
¯
e
3
}
g
»
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 2026, Ack: 1750, Len: 112
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 112
- Sequence number: 2026 (relative sequence number)
- Acknowledgment number: 1750 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 376
- Calculated window size: 48128
- Window size scaling factor: 128
- Checksum: 0x0098 [unverified]
- Urgent pointer: 0
- TCP payload (112 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): 171447ca
- Encrypted Packet: 21bc9f305e07b90ca65e45f4c43516ade407711c6e616794...
- MAC: 3c6afdba4476dec9f89eaf65337d67bb
0000
00
16
9a
b8
2c
9d
a4
c8
95
5b
92
5a
80
00
05
6a
0010
00
28
00
00
0000
.
.
.
¸
,
.
¤
È
.
[
.
Z
.
.
.
j
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 1750, Ack: 2138, Len: 0
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 0
- Sequence number: 1750 (relative sequence number)
- Acknowledgment number: 2138 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1386
- Calculated window size: 177408
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
9a
b8
2c
9d
a4
c8
95
5b
92
5a
80
00
05
6a
0010
03
d4
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
81
d9
b8
5b
2b
4d
0a
6d
10
ea
e4
2a
8a
9e
25
cf
0030
f3
e5
6d
9c
e5
e5
e4
f2
f4
a5
a3
66
1e
cb
ff
0c
0040
b7
19
3e
9c
58
fe
7b
a4
a7
9d
c4
a1
ed
f1
21
dd
0050
c2
21
35
4b
5c
25
8a
b2
ac
c0
5b
42
b5
1a
b1
4c
0060
9e
42
f7
dd
c6
6b
69
eb
1e
de
39
bc
f1
b3
29
1d
0070
11
e1
c3
ed
e1
3d
33
80
16
bb
98
5f
e5
42
dd
cb
0080
f9
22
e3
96
4d
90
97
ff
35
14
48
f6
0c
9f
c2
ee
0090
96
51
d2
78
f7
17
de
26
e3
1c
8e
2c
f4
f1
22
25
00A0
67
7a
b8
71
4c
bf
60
37
0a
26
35
9f
ce
c0
2a
9d
00B0
24
95
a7
53
69
66
2a
35
00
49
e9
26
99
99
8d
32
00C0
69
1b
c6
d6
9b
08
1e
0c
71
62
a0
0e
2f
13
7d
77
00D0
5f
9a
85
ae
05
ef
cf
13
f4
50
df
a5
96
d4
66
2a
00E0
7c
84
ca
49
02
f0
27
7c
e9
33
f8
0c
69
92
14
cf
00F0
91
36
50
42
1b
82
3c
02
60
c8
90
2d
bb
b6
82
85
0100
bc
fe
dd
10
1f
74
89
bf
ab
81
90
a9
61
b6
0f
e8
0110
93
fb
68
0d
d2
a2
7b
ce
01
5b
c3
d8
2c
34
f6
36
0120
24
5a
4d
d8
cd
ba
19
e3
b6
d0
a1
a9
0c
79
4d
c9
0130
44
c0
87
ce
1f
50
f7
94
90
d9
bb
97
78
00
7c
02
0140
84
b3
95
03
1b
86
f4
e6
e3
ec
93
6e
3a
29
19
ac
0150
5a
15
95
13
9d
33
20
66
bf
75
4e
e7
dd
4e
9c
99
0160
8e
57
e8
00
79
d9
15
b2
88
6a
8b
80
63
3c
ff
9f
0170
06
0c
54
14
fb
3a
d6
49
a1
c7
4c
d0
13
ea
2b
e8
0180
14
31
90
29
31
f9
63
eb
6d
27
10
55
87
45
d5
2a
0190
cc
59
64
16
c3
97
18
27
d4
e6
a4
6f
78
3e
3c
06
01A0
5d
dc
8b
06
e8
74
55
6c
58
7f
a7
3a
c3
cf
f6
6b
01B0
fd
fe
f8
32
5d
3c
21
50
80
f2
8d
5a
b0
87
47
ac
01C0
02
51
a5
cf
97
58
32
83
c0
73
16
94
72
86
ab
7a
01D0
11
34
cf
42
94
cb
8e
b4
48
ef
9f
fe
8a
f7
b6
db
01E0
2b
1f
25
67
da
b2
06
22
1b
65
42
c7
3f
8c
13
7b
01F0
56
62
9d
59
c0
1b
e4
ab
ce
9c
6d
b9
fa
84
98
62
0200
fd
9c
b0
39
5e
00
21
7d
f5
31
14
c9
c1
ed
c7
22
0210
6f
0d
83
40
27
ab
d1
e3
5e
a1
a6
7e
ac
d6
a0
6b
0220
2b
5d
91
22
88
35
99
74
19
d1
59
31
30
dc
fb
55
0230
7a
36
97
c1
c6
63
84
92
84
8a
39
1b
49
eb
f3
91
0240
58
d7
a0
fd
5a
ae
67
15
82
4e
7d
32
db
bb
27
f5
0250
27
5f
83
e6
a0
2d
70
aa
f0
8a
58
ce
ba
58
83
38
0260
64
dd
59
a9
b5
ad
b4
63
6a
f8
4b
86
7a
5d
3c
86
0270
8d
bb
4d
ac
03
77
89
b1
2d
e5
7b
31
79
65
a6
39
0280
82
d3
ac
2b
75
bd
ef
c9
f7
d1
4c
aa
09
18
12
0d
0290
77
2d
aa
d0
25
b9
7b
71
b5
77
f3
27
3c
fc
11
c3
02A0
03
ee
df
1b
2f
ea
36
36
6e
bf
dd
4c
59
28
14
42
02B0
11
f5
74
8e
86
9d
2d
c4
c6
01
c3
f4
2f
60
a2
83
02C0
c9
0c
de
c7
3f
43
7e
26
ed
27
64
3b
74
cf
be
cd
02D0
a6
69
04
c8
f6
e0
fd
66
0b
bf
92
99
ff
85
43
7a
02E0
bd
9f
32
ba
22
7d
65
10
63
d7
c0
32
e5
a9
65
b5
02F0
cd
78
4e
c4
55
a1
b7
7f
4a
6f
00
34
8f
e0
dc
ea
0300
3e
0b
a1
aa
ca
3d
37
10
e7
6f
d3
f6
e7
6a
95
9c
0310
85
bf
22
e1
e8
6f
f0
2e
0a
8b
4f
7d
77
42
f3
67
0320
eb
d3
d4
b5
42
a7
41
a6
f8
0a
35
52
b2
03
0c
1a
0330
a0
df
60
4c
46
82
fa
53
17
61
59
88
87
82
6f
72
0340
77
41
3e
07
4f
76
09
36
b3
83
59
83
5f
f9
ef
dd
0350
73
7d
1d
65
b3
73
9d
86
22
5e
a8
1c
7a
c0
24
6f
0360
ae
52
b9
51
bd
03
27
ee
6c
42
fb
b7
6c
76
75
c0
0370
18
03
8c
39
e8
6a
75
e0
e8
ed
8d
49
92
3f
1c
c8
0380
85
5c
91
5d
13
6d
75
07
43
1c
3e
19
d2
c6
a2
c9
0390
00
df
a2
06
10
20
46
47
1c
6e
92
3f
82
e9
ff
33
03A0
a9
36
4d
50
94
ab
e4
25
43
6d
f6
a6
4e
31
b8
ad
03B0
dc
50
ba
3d
03
23
ff
46
3a
92
f1
c7
2b
97
ab
5c
03C0
2a
d6
40
aa
2c
1d
50
35
fd
a0
b4
e3
0000
.
.
.
¸
,
.
¤
È
.
[
.
Z
.
.
.
j
0010
.
Ô
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
Ù
¸
[
+
M
.
m
.
ê
ä
*
.
.
%
Ï
0030
ó
å
m
.
å
å
ä
ò
ô
¥
£
f
.
Ë
ÿ
.
0040
·
.
>
.
X
þ
{
¤
§
.
Ä
¡
í
ñ
!
Ý
0050
Â
!
5
K
\
%
.
²
¬
À
[
B
µ
.
±
L
0060
.
B
÷
Ý
Æ
k
i
ë
.
Þ
9
¼
ñ
³
)
.
0070
.
á
Ã
í
á
=
3
.
.
»
.
_
å
B
Ý
Ë
0080
ù
"
ã
.
M
.
.
ÿ
5
.
H
ö
.
.
Â
î
0090
.
Q
Ò
x
÷
.
Þ
&
ã
.
.
,
ô
ñ
"
%
00A0
g
z
¸
q
L
¿
`
7
.
&
5
.
Î
À
*
.
00B0
$
.
§
S
i
f
*
5
.
I
é
&
.
.
.
2
00C0
i
.
Æ
Ö
.
.
.
.
q
b
.
.
/
.
}
w
00D0
_
.
.
®
.
ï
Ï
.
ô
P
ß
¥
.
Ô
f
*
00E0
|
.
Ê
I
.
ð
'
|
é
3
ø
.
i
.
.
Ï
00F0
.
6
P
B
.
.
<
.
`
È
.
-
»
¶
.
.
0100
¼
þ
Ý
.
.
t
.
¿
«
.
.
©
a
¶
.
è
0110
.
û
h
.
Ò
¢
{
Î
.
[
Ã
Ø
,
4
ö
6
0120
$
Z
M
Ø
Í
º
.
ã
¶
Ð
¡
©
.
y
M
É
0130
D
À
.
Î
.
P
÷
.
.
Ù
»
.
x
.
|
.
0140
.
³
.
.
.
.
ô
æ
ã
ì
.
n
:
)
.
¬
0150
Z
.
.
.
.
3
f
¿
u
N
ç
Ý
N
.
.
0160
.
W
è
.
y
Ù
.
²
.
j
.
.
c
<
ÿ
.
0170
.
.
T
.
û
:
Ö
I
¡
Ç
L
Ð
.
ê
+
è
0180
.
1
.
)
1
ù
c
ë
m
'
.
U
.
E
Õ
*
0190
Ì
Y
d
.
Ã
.
.
'
Ô
æ
¤
o
x
>
<
.
01A0
]
Ü
.
.
è
t
U
l
X
.
§
:
Ã
Ï
ö
k
01B0
ý
þ
ø
2
]
<
!
P
.
ò
.
Z
°
.
G
¬
01C0
.
Q
¥
Ï
.
X
2
.
À
s
.
.
r
.
«
z
01D0
.
4
Ï
B
.
Ë
.
´
H
ï
.
þ
.
÷
¶
Û
01E0
+
.
%
g
Ú
²
.
"
.
e
B
Ç
?
.
.
{
01F0
V
b
.
Y
À
.
ä
«
Î
.
m
¹
ú
.
.
b
0200
ý
.
°
9
^
.
!
}
õ
1
.
É
Á
í
Ç
"
0210
o
.
.
@
'
«
Ñ
ã
^
¡
¦
~
¬
Ö
.
k
0220
+
]
.
"
.
5
.
t
.
Ñ
Y
1
0
Ü
û
U
0230
z
6
.
Á
Æ
c
.
.
.
.
9
.
I
ë
ó
.
0240
X
×
.
ý
Z
®
g
.
.
N
}
2
Û
»
'
õ
0250
'
_
.
æ
.
-
p
ª
ð
.
X
Î
º
X
.
8
0260
d
Ý
Y
©
µ
.
´
c
j
ø
K
.
z
]
<
.
0270
.
»
M
¬
.
w
.
±
-
å
{
1
y
e
¦
9
0280
.
Ó
¬
+
u
½
ï
É
÷
Ñ
L
ª
.
.
.
.
0290
w
-
ª
Ð
%
¹
{
q
µ
w
ó
'
<
ü
.
Ã
02A0
.
î
ß
.
/
ê
6
6
n
¿
Ý
L
Y
(
.
B
02B0
.
õ
t
.
.
.
-
Ä
Æ
.
Ã
ô
/
`
¢
.
02C0
É
.
Þ
Ç
?
C
~
&
í
'
d
;
t
Ï
¾
Í
02D0
¦
i
.
È
ö
à
ý
f
.
¿
.
.
ÿ
.
C
z
02E0
½
.
2
º
"
}
e
.
c
×
À
2
å
©
e
µ
02F0
Í
x
N
Ä
U
¡
·
.
J
o
.
4
.
à
Ü
ê
0300
>
.
¡
ª
Ê
=
7
.
ç
o
Ó
ö
ç
j
.
.
0310
.
¿
"
á
è
o
ð
.
.
.
O
}
w
B
ó
g
0320
ë
Ó
Ô
µ
B
§
A
¦
ø
.
5
R
²
.
.
.
0330
.
ß
`
L
F
.
ú
S
.
a
Y
.
.
.
o
r
0340
w
A
>
.
O
v
.
6
³
.
Y
.
_
ù
ï
Ý
0350
s
}
.
e
³
s
.
.
"
^
¨
.
z
À
$
o
0360
®
R
¹
Q
½
.
'
î
l
B
û
·
l
v
u
À
0370
.
.
.
9
è
j
u
à
è
í
.
I
.
?
.
È
0380
.
\
.
]
.
m
u
.
C
.
>
.
Ò
Æ
¢
É
0390
.
ß
¢
.
.
F
G
.
n
.
?
.
é
ÿ
3
03A0
©
6
M
P
.
«
ä
%
C
m
ö
¦
N
1
¸
.
03B0
Ü
P
º
=
.
#
ÿ
F
:
.
ñ
Ç
+
.
«
\
03C0
*
Ö
@
ª
,
.
P
5
ý
.
´
ã
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 1750, Ack: 2138, Len: 940
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 940
- Sequence number: 1750 (relative sequence number)
- Acknowledgment number: 2138 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1386
- Calculated window size: 177408
- Window size scaling factor: 128
- Checksum: 0x03d4 [unverified]
- Urgent pointer: 0
- TCP payload (940 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): 81d9b85b
- Encrypted Packet: 2b4d0a6d10eae42a8a9e25cff3e56d9ce5e5e4f2f4a5a366...
- MAC: 2b97ab5c2ad640aa2c1d5035fda0b4e3
0000
9a
b8
00
16
95
5b
92
5a
2c
9d
a8
74
80
00
01
88
0010
00
28
00
00
0000
.
¸
.
.
.
[
.
Z
,
.
¨
t
.
.
.
.
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 2138, Ack: 2690, Len: 0
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 2138 (relative sequence number)
- Acknowledgment number: 2690 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 392
- Calculated window size: 50176
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
9a
b8
2c
9d
a8
74
95
5b
92
5a
80
00
05
6a
0010
00
54
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
54
d9
76
73
35
65
a1
7f
aa
87
7c
14
7a
cd
84
1b
0030
5d
07
c2
ed
f2
91
aa
f9
4c
8c
b5
da
f1
20
b4
23
0040
2a
11
5e
08
04
36
3d
45
f1
bd
9c
04
0000
.
.
.
¸
,
.
¨
t
.
[
.
Z
.
.
.
j
0010
.
T
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
T
Ù
v
s
5
e
¡
.
ª
.
|
.
z
Í
.
.
0030
]
.
Â
í
ò
.
ª
ù
L
.
µ
Ú
ñ
´
#
0040
*
.
^
.
.
6
=
E
ñ
½
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 2690, Ack: 2138, Len: 44
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 44
- Sequence number: 2690 (relative sequence number)
- Acknowledgment number: 2138 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1386
- Calculated window size: 177408
- Window size scaling factor: 128
- Checksum: 0x0054 [unverified]
- Urgent pointer: 0
- TCP payload (44 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): 54d97673
- Encrypted Packet: 3565a17faa877c147acd841b5d07c2edf291aaf94c8cb5da
- MAC: f120b4232a115e0804363d45f1bd9c04
0000
9a
b8
00
16
95
5b
92
5a
2c
9d
a8
a0
80
00
01
88
0010
00
28
00
00
0000
.
¸
.
.
.
[
.
Z
,
.
¨
.
.
.
.
.
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 2138, Ack: 2734, Len: 0
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 2138 (relative sequence number)
- Acknowledgment number: 2734 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 392
- Calculated window size: 50176
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
9a
b8
00
16
95
5b
92
5a
2c
9d
a8
a0
80
00
01
88
0010
04
70
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
d1
b5
52
c1
98
d1
80
19
33
ce
fa
cc
6e
5e
d9
ca
0030
37
8f
03
02
9a
88
9e
28
91
ee
70
f9
10
62
2c
95
0040
31
16
df
df
0f
4f
32
80
b5
f1
5c
7c
a3
76
6e
85
0050
ce
90
76
d9
e7
bf
8b
68
97
14
40
2c
fb
44
52
d5
0060
17
de
7f
c7
37
4a
81
c2
42
7d
08
20
35
67
13
95
0070
cc
38
fb
2b
47
71
df
16
de
55
a0
8e
6e
aa
e7
7e
0080
c5
8f
9a
b9
d4
b9
9f
8b
81
90
21
90
b9
48
8d
35
0090
e3
fd
3c
df
b9
42
eb
38
60
56
98
2f
5d
ec
9e
4f
00A0
74
c8
76
57
60
83
c4
f8
c8
6b
14
b8
4b
ec
97
87
00B0
13
e7
92
c6
0c
32
23
b2
83
96
53
f3
a6
ae
9b
6e
00C0
f2
6e
f3
8d
15
33
b1
6c
b1
3d
b9
82
d4
ce
3e
40
00D0
0f
01
7c
74
91
c9
c7
20
5d
f1
0f
84
53
a7
09
e3
00E0
aa
fa
48
1a
44
e1
c2
27
da
df
83
b4
a7
10
b2
2b
00F0
d7
8f
8d
c0
0d
25
49
a3
b0
6c
16
bc
b4
89
2d
4d
0100
14
2e
db
84
42
46
f5
c1
c3
3c
2c
31
46
fc
14
89
0110
62
4a
c2
00
f4
57
82
d1
ac
84
4a
ee
b5
ab
0e
7d
0120
e2
f9
44
45
4e
13
30
56
76
85
14
5a
03
1e
50
93
0130
11
07
73
3f
2f
8f
ff
52
cf
cf
6b
10
63
74
ed
ec
0140
35
d7
38
72
42
f9
7d
3c
60
dd
46
18
b6
23
08
ad
0150
94
35
f3
55
c7
7f
5d
0b
a0
2d
17
86
4d
1c
32
b5
0160
3d
3f
78
56
9f
c3
45
a4
83
ee
96
6d
07
1d
5d
56
0170
45
25
14
a3
11
fc
bf
31
cb
34
c9
5b
78
22
fd
97
0180
89
f2
3c
e4
86
d9
b3
07
d4
36
b1
41
fa
9e
ac
ba
0190
c2
ec
33
8f
ef
eb
d1
5a
60
b7
76
f2
9c
99
e2
14
01A0
1b
2b
d6
19
55
c1
60
80
5d
fa
0e
a7
75
f2
ad
a4
01B0
13
8c
99
ee
aa
06
95
78
d6
e3
17
73
59
dd
1d
d3
01C0
b1
bd
2c
db
23
96
6f
84
8f
01
01
0b
d1
8d
d8
ac
01D0
56
20
8f
64
10
bf
13
39
45
67
89
2c
89
78
95
aa
01E0
a7
5a
1a
9b
aa
c7
56
1e
98
78
0f
c8
bf
91
a7
22
01F0
24
b5
84
3a
25
6e
e8
0a
ab
92
1d
91
91
51
d7
29
0200
f4
7c
a8
7d
38
dc
0d
42
ab
b7
8d
c8
2e
0d
99
f3
0210
f9
cb
fe
68
2e
61
96
99
57
80
5d
2d
96
ec
fc
d9
0220
2d
d1
27
56
62
94
86
1f
a6
60
d3
12
17
38
11
f2
0230
b6
db
7d
e3
34
9d
69
6c
e4
02
60
4b
f5
41
4c
c3
0240
e0
ed
c3
9b
d0
31
8f
35
d7
2f
6a
7b
98
d9
ab
aa
0250
e0
e0
3f
4f
ef
44
66
42
24
30
f6
52
9b
df
b9
b8
0260
fc
02
e0
7a
ff
82
42
b8
35
d1
9e
b9
37
11
96
48
0270
fe
a8
36
78
c7
05
45
a8
9e
0a
66
e3
32
80
62
fe
0280
3e
3c
ee
65
cc
90
06
6b
80
ef
a5
13
2c
5b
39
dc
0290
27
2e
85
5a
6a
f1
09
a4
f7
12
2c
d3
68
45
94
3d
02A0
c4
a4
6e
d7
46
15
28
dd
f1
2e
95
73
64
c4
ef
d1
02B0
35
81
ee
d9
96
2e
01
f4
22
ec
4e
f4
24
91
60
45
02C0
3b
1c
22
13
05
08
a3
c1
c0
f7
9f
c2
18
da
1e
ae
02D0
5e
14
60
2b
a0
a0
13
c0
99
7b
f4
00
d4
ae
af
b4
02E0
24
88
28
9a
b0
2a
e5
10
07
6e
73
6b
ce
49
72
f6
02F0
26
bd
9e
d8
b5
33
ae
3d
68
7c
42
74
f0
35
e4
85
0300
ce
a8
7f
53
d9
ed
82
29
81
e2
a8
dd
eb
ab
13
31
0310
a5
d0
d6
05
8a
1a
0b
85
bc
7b
b7
2a
0c
96
f9
b4
0320
72
d9
f3
cb
9f
d3
4b
cd
1a
6e
16
47
7d
d3
c4
9a
0330
fe
0c
5e
c6
59
13
59
8a
24
1a
b6
6f
b8
1b
ac
b5
0340
c6
7a
ba
a6
50
14
33
df
ff
1d
4a
e9
91
94
c0
06
0350
48
34
16
a0
ac
91
c9
61
8d
59
89
68
24
cc
9b
49
0360
6a
9f
9e
eb
d9
c5
91
5f
63
91
c3
a1
4a
22
cc
83
0370
7b
04
27
0d
4b
82
d6
97
fa
38
52
fd
23
66
47
92
0380
94
ac
99
03
97
1f
cd
91
72
33
30
70
43
c9
ec
97
0390
e0
d6
4c
6f
fc
20
62
29
3b
e1
a9
ab
75
a4
a6
a2
03A0
7c
d2
f7
d8
49
08
59
22
77
87
4f
58
f3
ba
6c
41
03B0
74
a4
f3
35
61
2a
30
2c
3c
ec
e4
19
51
88
43
21
03C0
13
40
92
15
9c
80
33
e2
a2
70
53
e6
72
f8
a4
9e
03D0
85
ec
a4
3a
d6
1c
b6
b7
b0
09
54
66
cc
83
98
0e
03E0
1d
ed
3b
7e
4e
65
52
f4
75
46
ec
72
ea
90
9c
82
03F0
9d
16
3a
36
77
b7
89
e5
b1
5a
96
03
c2
62
ce
7f
0400
e2
85
21
18
bd
23
38
20
22
29
59
e2
f5
c4
96
cb
0410
50
a0
ad
3c
5d
6c
f2
6d
00
ac
b1
8f
6a
0a
17
dd
0420
fe
3c
30
5b
cd
3d
55
ed
03
d2
65
35
a9
bc
24
b9
0430
e7
e2
31
7d
8e
fc
76
d5
fb
76
c6
6b
e7
32
b6
f3
0440
51
43
c3
58
c5
7a
4b
98
b6
4f
d6
b2
48
d8
11
a2
0450
5d
49
7f
ad
30
2d
c2
bf
ca
82
83
fe
be
0c
d4
62
0460
e8
d3
16
eb
7d
cc
49
2d
0000
.
¸
.
.
.
[
.
Z
,
.
¨
.
.
.
.
.
0010
.
p
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
Ñ
µ
R
Á
.
Ñ
.
.
3
Î
ú
Ì
n
^
Ù
Ê
0030
7
.
.
.
.
.
.
(
.
î
p
ù
.
b
,
.
0040
1
.
ß
ß
.
O
2
.
µ
ñ
\
|
£
v
n
.
0050
Î
.
v
Ù
ç
¿
.
h
.
.
@
,
û
D
R
Õ
0060
.
Þ
.
Ç
7
J
.
Â
B
}
.
5
g
.
.
0070
Ì
8
û
+
G
q
ß
.
Þ
U
.
.
n
ª
ç
~
0080
Å
.
.
¹
Ô
¹
.
.
.
.
!
.
¹
H
.
5
0090
ã
ý
<
ß
¹
B
ë
8
`
V
.
/
]
ì
.
O
00A0
t
È
v
W
`
.
Ä
ø
È
k
.
¸
K
ì
.
.
00B0
.
ç
.
Æ
.
2
#
²
.
.
S
ó
¦
®
.
n
00C0
ò
n
ó
.
.
3
±
l
±
=
¹
.
Ô
Î
>
@
00D0
.
.
|
t
.
É
Ç
]
ñ
.
.
S
§
.
ã
00E0
ª
ú
H
.
D
á
Â
'
Ú
ß
.
´
§
.
²
+
00F0
×
.
.
À
.
%
I
£
°
l
.
¼
´
.
-
M
0100
.
.
Û
.
B
F
õ
Á
Ã
<
,
1
F
ü
.
.
0110
b
J
Â
.
ô
W
.
Ñ
¬
.
J
î
µ
«
.
}
0120
â
ù
D
E
N
.
0
V
v
.
.
Z
.
.
P
.
0130
.
.
s
?
/
.
ÿ
R
Ï
Ï
k
.
c
t
í
ì
0140
5
×
8
r
B
ù
}
<
`
Ý
F
.
¶
#
.
.
0150
.
5
ó
U
Ç
.
]
.
.
-
.
.
M
.
2
µ
0160
=
?
x
V
.
Ã
E
¤
.
î
.
m
.
.
]
V
0170
E
%
.
£
.
ü
¿
1
Ë
4
É
[
x
"
ý
.
0180
.
ò
<
ä
.
Ù
³
.
Ô
6
±
A
ú
.
¬
º
0190
Â
ì
3
.
ï
ë
Ñ
Z
`
·
v
ò
.
.
â
.
01A0
.
+
Ö
.
U
Á
`
.
]
ú
.
§
u
ò
.
¤
01B0
.
.
.
î
ª
.
.
x
Ö
ã
.
s
Y
Ý
.
Ó
01C0
±
½
,
Û
#
.
o
.
.
.
.
.
Ñ
.
Ø
¬
01D0
V
.
d
.
¿
.
9
E
g
.
,
.
x
.
ª
01E0
§
Z
.
.
ª
Ç
V
.
.
x
.
È
¿
.
§
"
01F0
$
µ
.
:
%
n
è
.
«
.
.
.
.
Q
×
)
0200
ô
|
¨
}
8
Ü
.
B
«
·
.
È
.
.
.
ó
0210
ù
Ë
þ
h
.
a
.
.
W
.
]
-
.
ì
ü
Ù
0220
-
Ñ
'
V
b
.
.
.
¦
`
Ó
.
.
8
.
ò
0230
¶
Û
}
ã
4
.
i
l
ä
.
`
K
õ
A
L
Ã
0240
à
í
Ã
.
Ð
1
.
5
×
/
j
{
.
Ù
«
ª
0250
à
à
?
O
ï
D
f
B
$
0
ö
R
.
ß
¹
¸
0260
ü
.
à
z
ÿ
.
B
¸
5
Ñ
.
¹
7
.
.
H
0270
þ
¨
6
x
Ç
.
E
¨
.
.
f
ã
2
.
b
þ
0280
>
<
î
e
Ì
.
.
k
.
ï
¥
.
,
[
9
Ü
0290
'
.
.
Z
j
ñ
.
¤
÷
.
,
Ó
h
E
.
=
02A0
Ä
¤
n
×
F
.
(
Ý
ñ
.
.
s
d
Ä
ï
Ñ
02B0
5
.
î
Ù
.
.
.
ô
"
ì
N
ô
$
.
`
E
02C0
;
.
"
.
.
.
£
Á
À
÷
.
Â
.
Ú
.
®
02D0
^
.
`
+
.
.
.
À
.
{
ô
.
Ô
®
¯
´
02E0
$
.
(
.
°
*
å
.
.
n
s
k
Î
I
r
ö
02F0
&
½
.
Ø
µ
3
®
=
h
|
B
t
ð
5
ä
.
0300
Î
¨
.
S
Ù
í
.
)
.
â
¨
Ý
ë
«
.
1
0310
¥
Ð
Ö
.
.
.
.
.
¼
{
·
*
.
.
ù
´
0320
r
Ù
ó
Ë
.
Ó
K
Í
.
n
.
G
}
Ó
Ä
.
0330
þ
.
^
Æ
Y
.
Y
.
$
.
¶
o
¸
.
¬
µ
0340
Æ
z
º
¦
P
.
3
ß
ÿ
.
J
é
.
.
À
.
0350
H
4
.
.
¬
.
É
a
.
Y
.
h
$
Ì
.
I
0360
j
.
.
ë
Ù
Å
.
_
c
.
Ã
¡
J
"
Ì
.
0370
{
.
'
.
K
.
Ö
.
ú
8
R
ý
#
f
G
.
0380
.
¬
.
.
.
.
Í
.
r
3
0
p
C
É
ì
.
0390
à
Ö
L
o
ü
b
)
;
á
©
«
u
¤
¦
¢
03A0
|
Ò
÷
Ø
I
.
Y
"
w
.
O
X
ó
º
l
A
03B0
t
¤
ó
5
a
*
0
,
<
ì
ä
.
Q
.
C
!
03C0
.
@
.
.
.
.
3
â
¢
p
S
æ
r
ø
¤
.
03D0
.
ì
¤
:
Ö
.
¶
·
°
.
T
f
Ì
.
.
.
03E0
.
í
;
~
N
e
R
ô
u
F
ì
r
ê
.
.
.
03F0
.
.
:
6
w
·
.
å
±
Z
.
.
Â
b
Î
.
0400
â
.
!
.
½
#
8
"
)
Y
â
õ
Ä
.
Ë
0410
P
.
.
<
]
l
ò
m
.
¬
±
.
j
.
.
Ý
0420
þ
<
0
[
Í
=
U
í
.
Ò
e
5
©
¼
$
¹
0430
ç
â
1
}
.
ü
v
Õ
û
v
Æ
k
ç
2
¶
ó
0440
Q
C
Ã
X
Å
z
K
.
¶
O
Ö
²
H
Ø
.
¢
0450
]
I
.
.
0
-
Â
¿
Ê
.
.
þ
¾
.
Ô
b
0460
è
Ó
.
ë
}
Ì
I
-
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 2138, Ack: 2734, Len: 1096
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 1096
- Sequence number: 2138 (relative sequence number)
- Acknowledgment number: 2734 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 392
- Calculated window size: 50176
- Window size scaling factor: 128
- Checksum: 0x0470 [unverified]
- Urgent pointer: 0
- TCP payload (1096 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): d1b552c1
- Encrypted Packet: 98d1801933cefacc6e5ed9ca378f03029a889e2891ee70f9...
- MAC: ca8283febe0cd462e8d316eb7dcc492d
0000
00
16
9a
b8
2c
9d
a8
a0
95
5b
96
a2
80
00
05
7f
0010
00
28
00
00
0000
.
.
.
¸
,
.
¨
.
.
[
.
¢
.
.
.
.
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 2734, Ack: 3234, Len: 0
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 0
- Sequence number: 2734 (relative sequence number)
- Acknowledgment number: 3234 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1407
- Calculated window size: 180096
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
9a
b8
2c
9d
a8
a0
95
5b
96
a2
80
00
05
7f
0010
00
94
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
7f
2f
40
f0
c6
0a
a5
b0
4d
91
19
29
e5
6a
01
a8
0030
d1
e1
af
52
e7
9a
2f
d6
d4
da
c3
ed
c3
39
ca
28
0040
c4
8f
a0
2a
f1
52
65
97
eb
dd
4d
87
a9
71
0e
94
0050
80
13
3d
fc
91
34
08
fb
c3
6f
3c
75
04
a6
50
e6
0060
df
38
f6
07
ea
89
68
61
55
d0
f8
a0
77
f1
f3
5e
0070
d2
d9
de
d5
2f
87
12
8e
53
23
73
7b
1d
96
0f
20
0080
61
0e
31
e0
74
be
d5
34
b9
f2
95
74
0000
.
.
.
¸
,
.
¨
.
.
[
.
¢
.
.
.
.
0010
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
/
@
ð
Æ
.
¥
°
M
.
.
)
å
j
.
¨
0030
Ñ
á
¯
R
ç
.
/
Ö
Ô
Ú
Ã
í
Ã
9
Ê
(
0040
Ä
.
.
*
ñ
R
e
.
ë
Ý
M
.
©
q
.
.
0050
.
.
=
ü
.
4
.
û
Ã
o
<
u
.
¦
P
æ
0060
ß
8
ö
.
ê
.
h
a
U
Ð
ø
.
w
ñ
ó
^
0070
Ò
Ù
Þ
Õ
/
.
.
.
S
#
s
{
.
.
.
0080
a
.
1
à
t
¾
Õ
4
¹
ò
.
t
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 2734, Ack: 3234, Len: 108
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 108
- Sequence number: 2734 (relative sequence number)
- Acknowledgment number: 3234 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1407
- Calculated window size: 180096
- Window size scaling factor: 128
- Checksum: 0x0094 [unverified]
- Urgent pointer: 0
- TCP payload (108 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): 7f2f40f0
- Encrypted Packet: c60aa5b04d911929e56a01a8d1e1af52e79a2fd6d4dac3ed...
- MAC: 1d960f20610e31e074bed534b9f29574
0000
00
16
9a
b8
2c
9d
a9
0c
95
5b
96
a2
80
00
05
7f
0010
01
ec
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
11
bf
9e
c6
04
ca
ad
4b
ad
7e
05
79
b6
8b
3c
41
0030
3f
8a
b8
04
17
bc
db
cb
37
c6
31
94
c3
bf
e4
ad
0040
fb
7c
bd
6d
65
8b
e2
1c
6b
b7
0a
96
58
d2
f7
bf
0050
43
2f
c9
e5
73
31
ae
1a
ec
27
b6
89
1b
e0
09
a3
0060
f8
57
8b
0d
9d
a8
e0
d8
0b
0e
f2
f8
f8
63
64
7e
0070
fc
91
b7
4e
01
75
f4
52
46
a5
a5
13
d1
85
82
52
0080
49
73
99
4a
83
f8
e4
bd
83
3f
4a
2a
89
16
df
3f
0090
b2
17
91
75
7c
f6
f3
99
84
e2
86
2c
ce
d8
10
03
00A0
e3
ce
68
99
d2
e6
34
71
f1
ff
06
58
e9
a6
b4
f8
00B0
4c
c8
ff
cc
af
46
2a
30
97
59
0b
d0
d1
71
7e
d8
00C0
b7
c5
53
30
5f
5f
48
9f
39
3b
05
2e
d7
08
35
b5
00D0
ef
f5
46
9a
1b
98
55
1b
d0
04
ac
3b
8a
bb
13
e2
00E0
fc
63
8b
82
36
11
a1
27
c9
74
86
ba
d7
e4
35
1a
00F0
c3
9e
f9
78
da
fb
e2
d0
62
4d
4b
db
1e
35
d7
81
0100
28
24
8e
e4
2a
c7
18
a0
2a
02
08
c3
e9
a1
f4
08
0110
42
25
a3
09
81
d7
a7
2f
d8
44
10
7a
9c
8f
76
87
0120
48
e4
7b
16
b6
ec
d2
d2
96
1b
59
8a
31
1f
c4
13
0130
f5
34
3b
22
99
10
39
3c
5e
38
11
2f
3d
c0
ee
1a
0140
c0
82
eb
6f
91
82
a5
74
ac
93
b3
84
53
9f
e3
ea
0150
55
06
2c
ac
b1
1d
b9
92
7a
fd
c7
7e
88
22
d2
9d
0160
ad
a8
47
b5
86
f3
29
77
e6
0f
05
c9
a1
b7
05
e8
0170
3f
6c
68
75
00
e3
d9
18
66
3a
bf
05
61
8e
14
88
0180
7e
2c
73
5f
e6
4e
c5
5c
5e
61
1a
18
2b
ee
62
44
0190
79
84
2b
7b
d6
db
62
a9
b4
21
86
25
5c
44
35
00
01A0
d6
2d
f8
4d
b3
b0
19
73
d9
2e
83
0a
31
93
dc
c6
01B0
44
6b
69
78
4f
3e
81
33
0e
40
97
44
a9
f0
e4
e9
01C0
fa
99
d0
a1
2d
ad
d0
27
6b
eb
51
e2
c1
25
8b
fa
01D0
0d
66
bf
9d
ec
f7
f4
10
60
70
3e
6e
61
89
48
db
01E0
93
38
52
44
0000
.
.
.
¸
,
.
©
.
.
[
.
¢
.
.
.
.
0010
.
ì
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
¿
.
Æ
.
Ê
.
K
.
~
.
y
¶
.
<
A
0030
?
.
¸
.
.
¼
Û
Ë
7
Æ
1
.
Ã
¿
ä
.
0040
û
|
½
m
e
.
â
.
k
·
.
.
X
Ò
÷
¿
0050
C
/
É
å
s
1
®
.
ì
'
¶
.
.
à
.
£
0060
ø
W
.
.
.
¨
à
Ø
.
.
ò
ø
ø
c
d
~
0070
ü
.
·
N
.
u
ô
R
F
¥
¥
.
Ñ
.
.
R
0080
I
s
.
J
.
ø
ä
½
.
?
J
*
.
.
ß
?
0090
²
.
.
u
|
ö
ó
.
.
â
.
,
Î
Ø
.
.
00A0
ã
Î
h
.
Ò
æ
4
q
ñ
ÿ
.
X
é
¦
´
ø
00B0
L
È
ÿ
Ì
¯
F
*
0
.
Y
.
Ð
Ñ
q
~
Ø
00C0
·
Å
S
0
_
_
H
.
9
;
.
.
×
.
5
µ
00D0
ï
õ
F
.
.
.
U
.
Ð
.
¬
;
.
»
.
â
00E0
ü
c
.
.
6
.
¡
'
É
t
.
º
×
ä
5
.
00F0
Ã
.
ù
x
Ú
û
â
Ð
b
M
K
Û
.
5
×
.
0100
(
$
.
ä
*
Ç
.
.
*
.
.
Ã
é
¡
ô
.
0110
B
%
£
.
.
×
§
/
Ø
D
.
z
.
.
v
.
0120
H
ä
{
.
¶
ì
Ò
Ò
.
.
Y
.
1
.
Ä
.
0130
õ
4
;
"
.
.
9
<
^
8
.
/
=
À
î
.
0140
À
.
ë
o
.
.
¥
t
¬
.
³
.
S
.
ã
ê
0150
U
.
,
¬
±
.
¹
.
z
ý
Ç
~
.
"
Ò
.
0160
.
¨
G
µ
.
ó
)
w
æ
.
.
É
¡
·
.
è
0170
?
l
h
u
.
ã
Ù
.
f
:
¿
.
a
.
.
.
0180
~
,
s
_
æ
N
Å
\
^
a
.
.
+
î
b
D
0190
y
.
+
{
Ö
Û
b
©
´
!
.
%
\
D
5
.
01A0
Ö
-
ø
M
³
°
.
s
Ù
.
.
.
1
.
Ü
Æ
01B0
D
k
i
x
O
>
.
3
.
@
.
D
©
ð
ä
é
01C0
ú
.
Ð
¡
-
.
Ð
'
k
ë
Q
â
Á
%
.
ú
01D0
.
f
¿
.
ì
÷
ô
.
`
p
>
n
a
.
H
Û
01E0
.
8
R
D
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 2842, Ack: 3234, Len: 452
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 452
- Sequence number: 2842 (relative sequence number)
- Acknowledgment number: 3234 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1407
- Calculated window size: 180096
- Window size scaling factor: 128
- Checksum: 0x01ec [unverified]
- Urgent pointer: 0
- TCP payload (452 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): 11bf9ec6
- Encrypted Packet: 04caad4bad7e0579b68b3c413f8ab80417bcdbcb37c63194...
- MAC: ecf7f41060703e6e618948db93385244
0000
00
16
9a
b8
2c
9d
aa
d0
95
5b
96
a2
80
00
05
7f
0010
01
d4
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
f5
4b
5f
f7
ed
b3
9c
49
70
df
f6
6a
02
cd
ad
8d
0030
d8
67
37
6f
53
b6
08
de
55
0a
36
8f
f0
ce
e2
c6
0040
df
2e
5c
63
08
8c
29
6b
e3
cc
89
db
13
51
1e
9a
0050
d9
b3
43
b8
fc
71
d6
98
2b
ee
a4
40
88
31
5a
10
0060
d6
1d
ff
52
ef
f9
27
24
c4
20
b9
0d
c2
d2
94
9c
0070
85
56
63
81
08
ad
1b
d5
53
a1
87
40
8a
0a
6b
19
0080
ec
a0
b6
0c
ed
04
92
99
66
0c
73
70
9d
bf
bb
50
0090
72
b8
db
11
ee
37
bf
81
5e
30
31
c8
df
12
83
23
00A0
17
5e
7e
a0
9b
89
bf
24
22
fd
e2
c0
65
23
12
5b
00B0
f3
a3
66
d1
d2
5b
54
e1
81
6b
bd
74
0a
c6
4d
50
00C0
2f
09
ff
27
aa
f2
39
93
c1
b1
dd
b0
59
3c
51
52
00D0
40
19
0b
b7
74
a6
28
8c
f5
52
b0
0a
20
f6
40
ad
00E0
14
fc
67
2f
d3
eb
51
f3
6c
6e
42
1c
b0
00
3e
dc
00F0
75
48
0e
c9
6f
e6
65
7d
63
6c
6a
00
1d
a0
3b
1c
0100
da
8f
59
28
cb
6c
86
d3
ea
22
e1
4f
95
9a
cc
59
0110
7e
7d
39
9f
af
4e
ce
67
6e
5e
45
15
12
ca
63
e3
0120
8a
b4
8c
bf
7e
3f
2c
0e
1d
e9
4a
d9
61
a8
45
65
0130
de
54
a5
06
24
a5
11
a3
26
12
a3
ca
dd
ad
47
d7
0140
a8
c9
b8
a4
aa
95
2b
c3
93
31
79
3a
d3
37
71
1a
0150
f4
9f
6f
fa
d5
df
16
78
08
3b
2f
67
7d
da
c6
55
0160
bc
2c
ec
aa
d2
07
83
58
cb
52
6e
30
44
59
ac
c3
0170
31
63
51
9f
b4
e7
64
74
68
c5
ec
9c
bc
9e
c5
56
0180
48
3e
71
bd
77
f4
57
b1
20
fc
9f
15
d6
08
3e
5a
0190
de
12
ea
21
99
aa
9d
73
60
4a
03
6f
a2
dc
95
b2
01A0
b6
01
ec
cc
44
a0
22
aa
8f
08
5f
fe
1d
8a
57
cf
01B0
0d
60
f8
41
a7
6f
e1
26
b2
a1
cc
ad
42
fd
97
c5
01C0
13
e2
0f
86
aa
75
b7
81
56
1b
cc
a8
0000
.
.
.
¸
,
.
ª
Ð
.
[
.
¢
.
.
.
.
0010
.
Ô
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
õ
K
_
÷
í
³
.
I
p
ß
ö
j
.
Í
.
.
0030
Ø
g
7
o
S
¶
.
Þ
U
.
6
.
ð
Î
â
Æ
0040
ß
.
\
c
.
.
)
k
ã
Ì
.
Û
.
Q
.
.
0050
Ù
³
C
¸
ü
q
Ö
.
+
î
¤
@
.
1
Z
.
0060
Ö
.
ÿ
R
ï
ù
'
$
Ä
¹
.
Â
Ò
.
.
0070
.
V
c
.
.
.
.
Õ
S
¡
.
@
.
.
k
.
0080
ì
.
¶
.
í
.
.
.
f
.
s
p
.
¿
»
P
0090
r
¸
Û
.
î
7
¿
.
^
0
1
È
ß
.
.
#
00A0
.
^
~
.
.
.
¿
$
"
ý
â
À
e
#
.
[
00B0
ó
£
f
Ñ
Ò
[
T
á
.
k
½
t
.
Æ
M
P
00C0
/
.
ÿ
'
ª
ò
9
.
Á
±
Ý
°
Y
<
Q
R
00D0
@
.
.
·
t
¦
(
.
õ
R
°
.
ö
@
.
00E0
.
ü
g
/
Ó
ë
Q
ó
l
n
B
.
°
.
>
Ü
00F0
u
H
.
É
o
æ
e
}
c
l
j
.
.
.
;
.
0100
Ú
.
Y
(
Ë
l
.
Ó
ê
"
á
O
.
.
Ì
Y
0110
~
}
9
.
¯
N
Î
g
n
^
E
.
.
Ê
c
ã
0120
.
´
.
¿
~
?
,
.
.
é
J
Ù
a
¨
E
e
0130
Þ
T
¥
.
$
¥
.
£
&
.
£
Ê
Ý
.
G
×
0140
¨
É
¸
¤
ª
.
+
Ã
.
1
y
:
Ó
7
q
.
0150
ô
.
o
ú
Õ
ß
.
x
.
;
/
g
}
Ú
Æ
U
0160
¼
,
ì
ª
Ò
.
.
X
Ë
R
n
0
D
Y
¬
Ã
0170
1
c
Q
.
´
ç
d
t
h
Å
ì
.
¼
.
Å
V
0180
H
>
q
½
w
ô
W
±
ü
.
.
Ö
.
>
Z
0190
Þ
.
ê
!
.
ª
.
s
`
J
.
o
¢
Ü
.
²
01A0
¶
.
ì
Ì
D
.
"
ª
.
.
_
þ
.
.
W
Ï
01B0
.
`
ø
A
§
o
á
&
²
¡
Ì
.
B
ý
.
Å
01C0
.
â
.
.
ª
u
·
.
V
.
Ì
¨
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 3294, Ack: 3234, Len: 428
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 428
- Sequence number: 3294 (relative sequence number)
- Acknowledgment number: 3234 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1407
- Calculated window size: 180096
- Window size scaling factor: 128
- Checksum: 0x01d4 [unverified]
- Urgent pointer: 0
- TCP payload (428 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): f54b5ff7
- Encrypted Packet: edb39c4970dff66a02cdad8dd867376f53b608de550a368f...
- MAC: 42fd97c513e20f86aa75b781561bcca8
0000
9a
b8
00
16
95
5b
96
a2
2c
9d
aa
d0
80
00
01
99
0010
00
28
00
00
0000
.
¸
.
.
.
[
.
¢
,
.
ª
Ð
.
.
.
.
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3234, Ack: 3294, Len: 0
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 3234 (relative sequence number)
- Acknowledgment number: 3294 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 409
- Calculated window size: 52352
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
9a
b8
2c
9d
ac
7c
95
5b
96
a2
80
00
05
7f
0010
01
1c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
e8
d8
3a
a4
72
8c
f8
79
65
da
0d
09
cc
5d
06
63
0030
0d
b9
1d
7e
bb
b8
31
89
53
e0
7a
54
f3
bd
20
8b
0040
3c
dd
ee
53
07
9c
64
0f
ee
b0
0e
a3
ee
bf
94
7b
0050
f0
22
78
e8
33
fd
fe
95
2d
ba
24
02
18
66
53
bc
0060
a6
91
d4
20
20
d9
7c
2d
d3
54
6a
ef
77
53
25
62
0070
15
80
ae
eb
59
cf
67
7c
57
9e
fe
3e
a1
c3
c7
9f
0080
af
17
ad
93
cb
dc
31
9d
67
33
83
af
cd
fe
63
ee
0090
ce
8c
94
68
dc
8e
32
8b
4e
64
e0
01
b4
b7
a2
69
00A0
b1
72
a0
b7
4f
83
de
94
92
fe
a9
86
7f
ce
f8
ef
00B0
a6
17
38
88
a5
37
95
8e
cf
80
d1
25
08
57
a0
f6
00C0
c3
94
ba
f1
83
e4
df
bb
a3
9c
ab
d8
e3
36
fa
33
00D0
fa
ca
14
95
0b
82
61
a8
fc
da
b2
f0
ba
fb
04
0c
00E0
ac
85
a8
53
55
1a
06
1f
e9
39
b7
db
4b
d4
0f
a8
00F0
42
eb
f4
bd
48
62
92
3a
91
fa
3b
1f
9f
2d
77
b9
0100
b0
b2
8c
40
20
0b
83
c5
88
9a
cc
f0
30
69
70
ae
0110
be
e4
8b
43
0000
.
.
.
¸
,
.
¬
|
.
[
.
¢
.
.
.
.
0010
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
è
Ø
:
¤
r
.
ø
y
e
Ú
.
.
Ì
]
.
c
0030
.
¹
.
~
»
¸
1
.
S
à
z
T
ó
½
.
0040
<
Ý
î
S
.
.
d
.
î
°
.
£
î
¿
.
{
0050
ð
"
x
è
3
ý
þ
.
-
º
$
.
.
f
S
¼
0060
¦
.
Ô
Ù
|
-
Ó
T
j
ï
w
S
%
b
0070
.
.
®
ë
Y
Ï
g
|
W
.
þ
>
¡
Ã
Ç
.
0080
¯
.
.
.
Ë
Ü
1
.
g
3
.
¯
Í
þ
c
î
0090
Î
.
.
h
Ü
.
2
.
N
d
à
.
´
·
¢
i
00A0
±
r
.
·
O
.
Þ
.
.
þ
©
.
.
Î
ø
ï
00B0
¦
.
8
.
¥
7
.
.
Ï
.
Ñ
%
.
W
.
ö
00C0
Ã
.
º
ñ
.
ä
ß
»
£
.
«
Ø
ã
6
ú
3
00D0
ú
Ê
.
.
.
.
a
¨
ü
Ú
²
ð
º
û
.
.
00E0
¬
.
¨
S
U
.
.
.
é
9
·
Û
K
Ô
.
¨
00F0
B
ë
ô
½
H
b
.
:
.
ú
;
.
.
-
w
¹
0100
°
²
.
@
.
.
Å
.
.
Ì
ð
0
i
p
®
0110
¾
ä
.
C
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 3722, Ack: 3234, Len: 244
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 244
- Sequence number: 3722 (relative sequence number)
- Acknowledgment number: 3234 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1407
- Calculated window size: 180096
- Window size scaling factor: 128
- Checksum: 0x011c [unverified]
- Urgent pointer: 0
- TCP payload (244 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): e8d83aa4
- Encrypted Packet: 728cf87965da0d09cc5d06630db91d7ebbb8318953e07a54...
- MAC: 200b83c5889accf0306970aebee48b43
0000
9a
b8
00
16
95
5b
96
a2
2c
9d
ad
70
80
00
01
bb
0010
00
28
00
00
0000
.
¸
.
.
.
[
.
¢
,
.
.
p
.
.
.
»
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3234, Ack: 3966, Len: 0
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 3234 (relative sequence number)
- Acknowledgment number: 3966 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 443
- Calculated window size: 56704
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
9a
b8
2c
9d
ad
70
95
5b
96
a2
80
00
05
7f
0010
00
94
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
a7
cf
db
8f
57
03
a3
7c
c9
07
5e
49
30
41
7e
df
0030
a0
28
52
41
5f
7d
f0
a3
7a
ff
f9
f2
ed
e0
71
fb
0040
04
d6
c1
7f
63
67
53
b5
58
cb
29
12
93
3c
3f
78
0050
03
c1
32
0c
0c
81
ef
ca
c1
ed
09
38
20
e8
fc
bc
0060
d9
ca
76
62
67
7a
0e
d3
ab
4a
f3
0b
8e
3d
f0
ff
0070
49
8c
2e
35
98
b2
0b
7c
54
a2
5f
47
67
d7
02
b6
0080
cb
15
f9
ed
0e
28
71
cd
89
8f
6c
70
0000
.
.
.
¸
,
.
.
p
.
[
.
¢
.
.
.
.
0010
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
§
Ï
Û
.
W
.
£
|
É
.
^
I
0
A
~
ß
0030
.
(
R
A
_
}
ð
£
z
ÿ
ù
ò
í
à
q
û
0040
.
Ö
Á
.
c
g
S
µ
X
Ë
)
.
.
<
?
x
0050
.
Á
2
.
.
.
ï
Ê
Á
í
.
8
è
ü
¼
0060
Ù
Ê
v
b
g
z
.
Ó
«
J
ó
.
.
=
ð
ÿ
0070
I
.
.
5
.
²
.
|
T
¢
_
G
g
×
.
¶
0080
Ë
.
ù
í
.
(
q
Í
.
.
l
p
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 3966, Ack: 3234, Len: 108
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 108
- Sequence number: 3966 (relative sequence number)
- Acknowledgment number: 3234 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1407
- Calculated window size: 180096
- Window size scaling factor: 128
- Checksum: 0x0094 [unverified]
- Urgent pointer: 0
- TCP payload (108 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): a7cfdb8f
- Encrypted Packet: 5703a37cc9075e4930417edfa02852415f7df0a37afff9f2...
- MAC: 67d702b6cb15f9ed0e2871cd898f6c70
0000
9a
b8
00
16
95
5b
96
a2
2c
9d
ad
dc
80
00
01
bb
0010
00
28
00
00
0000
.
¸
.
.
.
[
.
¢
,
.
.
Ü
.
.
.
»
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3234, Ack: 4074, Len: 0
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 3234 (relative sequence number)
- Acknowledgment number: 4074 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 443
- Calculated window size: 56704
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
9a
b8
00
16
95
5b
96
a2
2c
9d
ad
dc
80
00
01
bb
0010
00
4c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
46
9f
da
3b
38
35
e5
a4
ac
47
ad
93
88
57
7c
aa
0030
2b
db
de
c8
3a
27
cb
6e
c9
19
17
7f
60
ad
44
d1
0040
1d
6d
ff
fe
0000
.
¸
.
.
.
[
.
¢
,
.
.
Ü
.
.
.
»
0010
.
L
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
F
.
Ú
;
8
5
å
¤
¬
G
.
.
.
W
|
ª
0030
+
Û
Þ
È
:
'
Ë
n
É
.
.
.
`
.
D
Ñ
0040
.
m
ÿ
þ
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3234, Ack: 4074, Len: 36
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 36
- Sequence number: 3234 (relative sequence number)
- Acknowledgment number: 4074 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 443
- Calculated window size: 56704
- Window size scaling factor: 128
- Checksum: 0x004c [unverified]
- Urgent pointer: 0
- TCP payload (36 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): 469fda3b
- Encrypted Packet: 3835e5a4ac47ad9388577caa2bdbdec8
- MAC: 3a27cb6ec919177f60ad44d11d6dfffe
0000
00
16
9a
b8
2c
9d
ad
dc
95
5b
96
c6
80
00
05
7f
0010
00
4c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
99
8f
03
d3
47
e9
0d
5d
08
e1
63
69
95
28
82
b2
0030
47
86
d3
2f
01
7f
bc
10
95
92
e9
04
9b
7f
09
11
0040
da
35
11
86
0000
.
.
.
¸
,
.
.
Ü
.
[
.
Æ
.
.
.
.
0010
.
L
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
Ó
G
é
.
]
.
á
c
i
.
(
.
²
0030
G
.
Ó
/
.
.
¼
.
.
.
é
.
.
.
.
.
0040
Ú
5
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 4074, Ack: 3270, Len: 36
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 36
- Sequence number: 4074 (relative sequence number)
- Acknowledgment number: 3270 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1407
- Calculated window size: 180096
- Window size scaling factor: 128
- Checksum: 0x004c [unverified]
- Urgent pointer: 0
- TCP payload (36 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): 998f03d3
- Encrypted Packet: 47e90d5d08e16369952882b24786d32f
- MAC: 017fbc109592e9049b7f0911da351186
0000
9a
b8
00
16
95
5b
96
c6
2c
9d
ae
00
80
00
01
bb
0010
00
28
00
00
0000
.
¸
.
.
.
[
.
Æ
,
.
®
.
.
.
.
»
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3270, Ack: 4110, Len: 0
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 3270 (relative sequence number)
- Acknowledgment number: 4110 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 443
- Calculated window size: 56704
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
9a
b8
00
16
95
5b
96
c6
2c
9d
ae
00
80
00
01
bb
0010
00
4c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
6f
b9
7a
2d
4b
73
7f
20
80
ba
fd
a8
f9
39
23
fc
0030
86
fd
48
7d
ee
8a
4d
3a
cc
c5
89
a8
b4
18
59
81
0040
db
8f
bf
38
0000
.
¸
.
.
.
[
.
Æ
,
.
®
.
.
.
.
»
0010
.
L
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
o
¹
z
-
K
s
.
.
º
ý
¨
ù
9
#
ü
0030
.
ý
H
}
î
.
M
:
Ì
Å
.
¨
´
.
Y
.
0040
Û
.
¿
8
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3270, Ack: 4110, Len: 36
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 36
- Sequence number: 3270 (relative sequence number)
- Acknowledgment number: 4110 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 443
- Calculated window size: 56704
- Window size scaling factor: 128
- Checksum: 0x004c [unverified]
- Urgent pointer: 0
- TCP payload (36 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): 6fb97a2d
- Encrypted Packet: 4b737f2080bafda8f93923fc86fd487d
- MAC: ee8a4d3accc589a8b4185981db8fbf38
0000
00
16
9a
b8
2c
9d
ae
00
95
5b
96
ea
80
00
05
7f
0010
00
4c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
80
69
08
c4
ac
ff
f7
57
a8
81
48
69
27
a1
cb
e4
0030
f2
2b
22
de
c0
9d
a8
e0
f6
b3
24
8c
0d
a7
23
6f
0040
5e
5c
e9
f9
0000
.
.
.
¸
,
.
®
.
.
[
.
ê
.
.
.
.
0010
.
L
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
i
.
Ä
¬
ÿ
÷
W
¨
.
H
i
'
¡
Ë
ä
0030
ò
+
"
Þ
À
.
¨
à
ö
³
$
.
.
§
#
o
0040
^
\
é
ù
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 4110, Ack: 3306, Len: 36
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 36
- Sequence number: 4110 (relative sequence number)
- Acknowledgment number: 3306 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1407
- Calculated window size: 180096
- Window size scaling factor: 128
- Checksum: 0x004c [unverified]
- Urgent pointer: 0
- TCP payload (36 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): 806908c4
- Encrypted Packet: acfff757a881486927a1cbe4f22b22de
- MAC: c09da8e0f6b3248c0da7236f5e5ce9f9
0000
9a
b8
00
16
95
5b
96
ea
2c
9d
ae
24
80
00
01
bb
0010
00
28
00
00
0000
.
¸
.
.
.
[
.
ê
,
.
®
$
.
.
.
»
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3306, Ack: 4146, Len: 0
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 3306 (relative sequence number)
- Acknowledgment number: 4146 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 443
- Calculated window size: 56704
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
9a
b8
00
16
95
5b
96
ea
2c
9d
ae
24
80
00
01
bb
0010
00
4c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
2c
f8
23
47
aa
4b
df
31
57
dc
2e
48
78
19
3e
d0
0030
4e
24
2d
79
48
33
1a
ee
f7
c6
97
5c
65
4f
af
9b
0040
3a
a7
42
54
0000
.
¸
.
.
.
[
.
ê
,
.
®
$
.
.
.
»
0010
.
L
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
,
ø
#
G
ª
K
ß
1
W
Ü
.
H
x
.
>
Ð
0030
N
$
-
y
H
3
.
î
÷
Æ
.
\
e
O
¯
.
0040
:
§
B
T
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3306, Ack: 4146, Len: 36
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 36
- Sequence number: 3306 (relative sequence number)
- Acknowledgment number: 4146 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 443
- Calculated window size: 56704
- Window size scaling factor: 128
- Checksum: 0x004c [unverified]
- Urgent pointer: 0
- TCP payload (36 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): 2cf82347
- Encrypted Packet: aa4bdf3157dc2e4878193ed04e242d79
- MAC: 48331aeef7c6975c654faf9b3aa74254
0000
00
16
9a
b8
2c
9d
ae
24
95
5b
97
0e
80
00
05
7f
0010
00
4c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
fa
e2
94
85
e2
8d
f7
cb
a9
3a
0f
0b
39
85
47
70
0030
6b
86
d7
fd
c7
7a
17
97
7f
f0
92
81
56
c7
b3
fb
0040
fa
7e
0c
f6
0000
.
.
.
¸
,
.
®
$
.
[
.
.
.
.
.
.
0010
.
L
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
ú
â
.
.
â
.
÷
Ë
©
:
.
.
9
.
G
p
0030
k
.
×
ý
Ç
z
.
.
.
ð
.
.
V
Ç
³
û
0040
ú
~
.
ö
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 4146, Ack: 3342, Len: 36
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 36
- Sequence number: 4146 (relative sequence number)
- Acknowledgment number: 3342 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1407
- Calculated window size: 180096
- Window size scaling factor: 128
- Checksum: 0x004c [unverified]
- Urgent pointer: 0
- TCP payload (36 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): fae29485
- Encrypted Packet: e28df7cba93a0f0b398547706b86d7fd
- MAC: c77a17977ff0928156c7b3fbfa7e0cf6
0000
9a
b8
00
16
95
5b
97
0e
2c
9d
ae
48
80
00
01
bb
0010
00
28
00
00
0000
.
¸
.
.
.
[
.
.
,
.
®
H
.
.
.
»
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3342, Ack: 4182, Len: 0
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 3342 (relative sequence number)
- Acknowledgment number: 4182 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 443
- Calculated window size: 56704
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
9a
b8
00
16
95
5b
97
0e
2c
9d
ae
48
80
00
01
bb
0010
00
4c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
81
2f
9b
f4
ee
c4
8e
45
39
7c
a6
82
77
5a
41
bb
0030
2f
25
7f
7e
87
2e
4a
4b
7b
a0
20
09
90
11
13
e4
0040
e7
76
46
2c
0000
.
¸
.
.
.
[
.
.
,
.
®
H
.
.
.
»
0010
.
L
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
/
.
ô
î
Ä
.
E
9
|
¦
.
w
Z
A
»
0030
/
%
.
~
.
.
J
K
{
.
.
.
.
.
ä
0040
ç
v
F
,
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3342, Ack: 4182, Len: 36
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 36
- Sequence number: 3342 (relative sequence number)
- Acknowledgment number: 4182 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 443
- Calculated window size: 56704
- Window size scaling factor: 128
- Checksum: 0x004c [unverified]
- Urgent pointer: 0
- TCP payload (36 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): 812f9bf4
- Encrypted Packet: eec48e45397ca682775a41bb2f257f7e
- MAC: 872e4a4b7ba02009901113e4e776462c
0000
00
16
9a
b8
2c
9d
ae
48
95
5b
97
32
80
00
05
7f
0010
00
4c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
5e
b0
f0
ee
d1
12
91
65
f0
1c
fe
10
8a
d8
f9
f4
0030
ec
50
6a
c5
a8
10
f2
7b
03
f1
c4
77
92
20
66
f9
0040
7e
56
e5
3d
0000
.
.
.
¸
,
.
®
H
.
[
.
2
.
.
.
.
0010
.
L
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
^
°
ð
î
Ñ
.
.
e
ð
.
þ
.
.
Ø
ù
ô
0030
ì
P
j
Å
¨
.
ò
{
.
ñ
Ä
w
.
f
ù
0040
~
V
å
=
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 4182, Ack: 3378, Len: 36
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 36
- Sequence number: 4182 (relative sequence number)
- Acknowledgment number: 3378 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1407
- Calculated window size: 180096
- Window size scaling factor: 128
- Checksum: 0x004c [unverified]
- Urgent pointer: 0
- TCP payload (36 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): 5eb0f0ee
- Encrypted Packet: d1129165f01cfe108ad8f9f4ec506ac5
- MAC: a810f27b03f1c477922066f97e56e53d
0000
9a
b8
00
16
95
5b
97
32
2c
9d
ae
6c
80
00
01
bb
0010
00
28
00
00
0000
.
¸
.
.
.
[
.
2
,
.
®
l
.
.
.
»
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3378, Ack: 4218, Len: 0
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 3378 (relative sequence number)
- Acknowledgment number: 4218 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 443
- Calculated window size: 56704
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
9a
b8
00
16
95
5b
97
32
2c
9d
ae
6c
80
00
01
bb
0010
00
4c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
b6
03
35
69
4c
a7
8a
b0
0d
9a
ae
be
af
60
a4
9b
0030
1d
8d
a5
b5
89
26
d0
12
45
67
6c
e2
04
a7
82
40
0040
e3
06
0a
f2
0000
.
¸
.
.
.
[
.
2
,
.
®
l
.
.
.
»
0010
.
L
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
¶
.
5
i
L
§
.
°
.
.
®
¾
¯
`
¤
.
0030
.
.
¥
µ
.
&
Ð
.
E
g
l
â
.
§
.
@
0040
ã
.
.
ò
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3378, Ack: 4218, Len: 36
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 36
- Sequence number: 3378 (relative sequence number)
- Acknowledgment number: 4218 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 443
- Calculated window size: 56704
- Window size scaling factor: 128
- Checksum: 0x004c [unverified]
- Urgent pointer: 0
- TCP payload (36 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): b6033569
- Encrypted Packet: 4ca78ab00d9aaebeaf60a49b1d8da5b5
- MAC: 8926d01245676ce204a78240e3060af2
0000
00
16
9a
b8
2c
9d
ae
6c
95
5b
97
56
80
00
05
7f
0010
00
4c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
11
cb
aa
9e
53
23
b2
f7
fd
ee
cc
cd
2e
dd
56
9b
0030
da
53
c1
41
be
7e
d9
08
5e
a6
d2
9d
af
7e
70
c2
0040
17
02
36
ae
0000
.
.
.
¸
,
.
®
l
.
[
.
V
.
.
.
.
0010
.
L
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
Ë
ª
.
S
#
²
÷
ý
î
Ì
Í
.
Ý
V
.
0030
Ú
S
Á
A
¾
~
Ù
.
^
¦
Ò
.
¯
~
p
Â
0040
.
.
6
®
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 4218, Ack: 3414, Len: 36
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 36
- Sequence number: 4218 (relative sequence number)
- Acknowledgment number: 3414 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1407
- Calculated window size: 180096
- Window size scaling factor: 128
- Checksum: 0x004c [unverified]
- Urgent pointer: 0
- TCP payload (36 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): 11cbaa9e
- Encrypted Packet: 5323b2f7fdeecccd2edd569bda53c141
- MAC: be7ed9085ea6d29daf7e70c2170236ae
0000
9a
b8
00
16
95
5b
97
56
2c
9d
ae
90
80
00
01
bb
0010
00
28
00
00
0000
.
¸
.
.
.
[
.
V
,
.
®
.
.
.
.
»
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3414, Ack: 4254, Len: 0
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 3414 (relative sequence number)
- Acknowledgment number: 4254 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 443
- Calculated window size: 56704
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
9a
b8
2c
9d
ae
90
95
5b
97
56
80
00
05
7f
0010
00
54
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
22
bb
b8
bb
3a
37
cd
e4
80
2d
02
07
53
3f
91
bc
0030
19
f4
73
4a
de
86
30
1b
37
80
a0
37
27
26
f5
32
0040
43
1c
e5
0f
aa
f2
78
f3
66
92
3e
96
0000
.
.
.
¸
,
.
®
.
.
[
.
V
.
.
.
.
0010
.
T
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
"
»
¸
»
:
7
Í
ä
.
-
.
.
S
?
.
¼
0030
.
ô
s
J
Þ
.
0
.
7
.
.
7
'
&
õ
2
0040
C
.
å
.
ª
ò
x
ó
f
.
>
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 4254, Ack: 3414, Len: 44
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 44
- Sequence number: 4254 (relative sequence number)
- Acknowledgment number: 3414 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1407
- Calculated window size: 180096
- Window size scaling factor: 128
- Checksum: 0x0054 [unverified]
- Urgent pointer: 0
- TCP payload (44 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): 22bbb8bb
- Encrypted Packet: 3a37cde4802d0207533f91bc19f4734ade86301b3780a037
- MAC: 2726f532431ce50faaf278f366923e96
0000
9a
b8
00
16
95
5b
97
56
2c
9d
ae
bc
80
00
01
bb
0010
00
28
00
00
0000
.
¸
.
.
.
[
.
V
,
.
®
¼
.
.
.
»
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3414, Ack: 4298, Len: 0
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 3414 (relative sequence number)
- Acknowledgment number: 4298 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 443
- Calculated window size: 56704
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
9a
b8
2c
9d
ae
bc
95
5b
97
56
80
00
05
7f
0010
00
d8
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
8b
39
33
76
b3
03
da
a9
5e
62
88
61
c9
fd
6e
c4
0030
c3
5a
23
0e
c4
15
cf
ed
55
4c
f5
a9
25
2a
a2
57
0040
31
65
2d
3b
08
6a
7a
6f
c9
cf
49
f1
16
6c
59
af
0050
e3
f5
f6
65
67
dd
07
85
55
96
b5
1a
19
13
c7
e2
0060
78
80
77
dd
5f
3c
65
18
2a
c8
5f
4b
2f
9c
85
61
0070
87
21
da
ca
a2
d5
82
6a
28
cb
75
17
5d
1c
c4
cf
0080
88
10
c3
44
3e
92
89
28
90
e4
27
45
f2
89
e9
a1
0090
bf
b3
a4
0b
7b
de
42
37
fd
4e
57
ff
5d
2d
14
9d
00A0
11
78
e1
4d
90
c5
a0
4d
57
1c
50
21
ea
84
b8
3f
00B0
5b
c4
41
fa
16
a8
5d
72
eb
89
63
b1
22
82
6b
1d
00C0
d1
77
a5
60
0b
50
78
87
49
03
31
16
7b
3c
11
81
0000
.
.
.
¸
,
.
®
¼
.
[
.
V
.
.
.
.
0010
.
Ø
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
9
3
v
³
.
Ú
©
^
b
.
a
É
ý
n
Ä
0030
Ã
Z
#
.
Ä
.
Ï
í
U
L
õ
©
%
*
¢
W
0040
1
e
-
;
.
j
z
o
É
Ï
I
ñ
.
l
Y
¯
0050
ã
õ
ö
e
g
Ý
.
.
U
.
µ
.
.
.
Ç
â
0060
x
.
w
Ý
_
<
e
.
*
È
_
K
/
.
.
a
0070
.
!
Ú
Ê
¢
Õ
.
j
(
Ë
u
.
]
.
Ä
Ï
0080
.
.
Ã
D
>
.
.
(
.
ä
'
E
ò
.
é
¡
0090
¿
³
¤
.
{
Þ
B
7
ý
N
W
ÿ
]
-
.
.
00A0
.
x
á
M
.
Å
.
M
W
.
P
!
ê
.
¸
?
00B0
[
Ä
A
ú
.
¨
]
r
ë
.
c
±
"
.
k
.
00C0
Ñ
w
¥
`
.
P
x
.
I
.
1
.
{
<
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 4298, Ack: 3414, Len: 176
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 176
- Sequence number: 4298 (relative sequence number)
- Acknowledgment number: 3414 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1407
- Calculated window size: 180096
- Window size scaling factor: 128
- Checksum: 0x00d8 [unverified]
- Urgent pointer: 0
- TCP payload (176 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): 8b393376
- Encrypted Packet: b303daa95e628861c9fd6ec4c35a230ec415cfed554cf5a9...
- MAC: d177a5600b507887490331167b3c1181
0000
9a
b8
00
16
95
5b
97
56
2c
9d
af
6c
80
00
01
cc
0010
00
28
00
00
0000
.
¸
.
.
.
[
.
V
,
.
¯
l
.
.
.
Ì
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3414, Ack: 4474, Len: 0
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 3414 (relative sequence number)
- Acknowledgment number: 4474 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 460
- Calculated window size: 58880
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
9a
b8
00
16
95
5b
97
56
2c
9d
af
6c
80
00
01
cc
0010
00
4c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
5d
b5
bb
46
6d
e8
d2
a2
67
af
1e
c7
10
2e
4b
7d
0030
ae
a9
2b
3a
dd
45
23
b3
05
f0
bb
a9
82
03
cc
f4
0040
c5
06
c5
25
0000
.
¸
.
.
.
[
.
V
,
.
¯
l
.
.
.
Ì
0010
.
L
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
]
µ
»
F
m
è
Ò
¢
g
¯
.
Ç
.
.
K
}
0030
®
©
+
:
Ý
E
#
³
.
ð
»
©
.
.
Ì
ô
0040
Å
.
Å
%
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3414, Ack: 4474, Len: 36
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 36
- Sequence number: 3414 (relative sequence number)
- Acknowledgment number: 4474 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 460
- Calculated window size: 58880
- Window size scaling factor: 128
- Checksum: 0x004c [unverified]
- Urgent pointer: 0
- TCP payload (36 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): 5db5bb46
- Encrypted Packet: 6de8d2a267af1ec7102e4b7daea92b3a
- MAC: dd4523b305f0bba98203ccf4c506c525
0000
9a
b8
00
16
95
5b
97
7a
2c
9d
af
6c
80
00
01
cc
0010
00
64
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
31
0c
e9
38
da
f6
d8
c1
ec
e1
d2
7a
2e
33
be
b5
0030
09
a6
0e
0c
07
52
ee
a2
57
44
52
66
aa
06
6f
ec
0040
e6
db
ab
55
04
9d
1e
76
01
c8
74
a6
c4
ab
b8
e3
0050
34
08
49
a3
7d
96
c8
18
4b
9b
26
d2
0000
.
¸
.
.
.
[
.
z
,
.
¯
l
.
.
.
Ì
0010
.
d
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
1
.
é
8
Ú
ö
Ø
Á
ì
á
Ò
z
.
3
¾
µ
0030
.
¦
.
.
.
R
î
¢
W
D
R
f
ª
.
o
ì
0040
æ
Û
«
U
.
.
.
v
.
È
t
¦
Ä
«
¸
ã
0050
4
.
I
£
}
.
È
.
K
.
&
Ò
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3450, Ack: 4474, Len: 60
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 60
- Sequence number: 3450 (relative sequence number)
- Acknowledgment number: 4474 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 460
- Calculated window size: 58880
- Window size scaling factor: 128
- Checksum: 0x0064 [unverified]
- Urgent pointer: 0
- TCP payload (60 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:none)
- Packet Length (encrypted): 310ce938
- Encrypted Packet: daf6d8c1ece1d27a2e33beb509a60e0c0752eea257445266...
- MAC: c4abb8e3340849a37d96c8184b9b26d2
0000
9a
b8
00
16
95
5b
97
b6
2c
9d
af
6c
80
00
01
cc
0010
00
28
00
00
0000
.
¸
.
.
.
[
.
¶
,
.
¯
l
.
.
.
Ì
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3510, Ack: 4474, Len: 0
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 3510 (relative sequence number)
- Acknowledgment number: 4474 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 460
- Calculated window size: 58880
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
9a
b8
2c
9d
af
6c
95
5b
97
b7
80
00
05
7f
0010
00
28
00
00
0000
.
.
.
¸
,
.
¯
l
.
[
.
·
.
.
.
.
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 4474, Ack: 3511, Len: 0
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 0
- Sequence number: 4474 (relative sequence number)
- Acknowledgment number: 3511 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1407
- Calculated window size: 180096
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
9a
b8
2c
9d
af
6c
95
5b
97
b7
80
00
05
7f
0010
00
28
00
00
0000
.
.
.
¸
,
.
¯
l
.
[
.
·
.
.
.
.
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 39608, Seq: 4474, Ack: 3511, Len: 0
- Source Port: 22
- Destination Port: 39608
- TCP Segment Len: 0
- Sequence number: 4474 (relative sequence number)
- Acknowledgment number: 3511 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1407
- Calculated window size: 180096
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
9a
b8
00
16
95
5b
97
b7
2c
9d
af
6d
80
00
01
cc
0010
00
28
00
00
0000
.
¸
.
.
.
[
.
·
,
.
¯
m
.
.
.
Ì
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 39608, Dst Port: 22, Seq: 3511, Ack: 4475, Len: 0
- Source Port: 39608
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 3511 (relative sequence number)
- Acknowledgment number: 4475 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 460
- Calculated window size: 58880
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0