The attached packet trace was collected on a Linux server. In the ssh protocol, the client and the server propose an ordered list of encryption schemes and technique that is supported by both of them and has the highest preference is selected.
# |
Taille |
Résumé |
État |
0 |
20 octets |
Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 0, Len: 0 |
|
1 |
20 octets |
Transmission Control Protocol, Src Port: 22, Dst Port: 46770, Seq: 0, Ack: 1, Len: 0 |
|
2 |
20 octets |
Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 1, Ack: 1, Len: 0 |
|
3 |
73 octets |
SSH Protocol |
|
4 |
20 octets |
Transmission Control Protocol, Src Port: 22, Dst Port: 46770, Seq: 1, Ack: 42, Len: 0 |
|
5 |
73 octets |
SSH Protocol |
|
6 |
20 octets |
Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 42, Ack: 42, Len: 0 |
|
7 |
1112 octets |
SSH Protocol |
|
8 |
20 octets |
Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 42, Ack: 1122, Len: 0 |
|
9 |
1240 octets |
SSH Protocol |
|
10 |
20 octets |
Transmission Control Protocol, Src Port: 22, Dst Port: 46770, Seq: 1122, Ack: 1250, Len: 0 |
|
11 |
80 octets |
SSH Protocol |
|
12 |
492 octets |
SSH Protocol |
|
13 |
48 octets |
SSH Protocol |
|
14 |
20 octets |
Transmission Control Protocol, Src Port: 22, Dst Port: 46770, Seq: 1582, Ack: 1314, Len: 0 |
|
15 |
84 octets |
SSH Protocol |
|
16 |
20 octets |
Transmission Control Protocol, Src Port: 22, Dst Port: 46770, Seq: 1582, Ack: 1366, Len: 0 |
|
17 |
84 octets |
SSH Protocol |
|
18 |
100 octets |
SSH Protocol |
|
19 |
84 octets |
SSH Protocol |
|
20 |
404 octets |
SSH Protocol |
|
21 |
84 octets |
SSH Protocol |
|
22 |
20 octets |
Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 1806, Ack: 1738, Len: 0 |
|
23 |
180 octets |
SSH Protocol |
|
24 |
68 octets |
SSH Protocol |
|
25 |
20 octets |
Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 1954, Ack: 1774, Len: 0 |
|
26 |
152 octets |
SSH Protocol |
|
27 |
20 octets |
Transmission Control Protocol, Src Port: 22, Dst Port: 46770, Seq: 1774, Ack: 2074, Len: 0 |
|
28 |
980 octets |
SSH Protocol |
|
29 |
20 octets |
Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 2074, Ack: 2722, Len: 0 |
|
30 |
84 octets |
SSH Protocol |
|
31 |
20 octets |
Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 2074, Ack: 2774, Len: 0 |
|
32 |
1168 octets |
SSH Protocol |
|
33 |
20 octets |
Transmission Control Protocol, Src Port: 22, Dst Port: 46770, Seq: 2774, Ack: 3210, Len: 0 |
|
34 |
140 octets |
SSH Protocol |
|
35 |
628 octets |
SSH Protocol |
|
36 |
20 octets |
Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 3210, Ack: 3478, Len: 0 |
|
37 |
148 octets |
SSH Protocol |
|
38 |
20 octets |
Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 3210, Ack: 3594, Len: 0 |
|
0000
b6
b2
00
16
3a
35
85
a2
00
00
00
00
a0
00
aa
aa
0010
00
30
00
00
0000
¶
²
.
.
:
5
.
¢
.
.
.
.
.
.
ª
ª
0010
.
0
.
.
- Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 0, Len: 0
- Source Port: 46770
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 0 (relative sequence number)
- Acknowledgment number: 0
- 1010 .... = Header Length: 40 bytes (10)
- Window size value: 43690
- Calculated window size: 43690
- Checksum: 0x0030 [unverified]
- Urgent pointer: 0
0000
00
16
b6
b2
eb
49
91
0d
3a
35
85
a3
a0
00
aa
aa
0010
00
30
00
00
0000
.
.
¶
²
ë
I
.
.
:
5
.
£
.
.
ª
ª
0010
.
0
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46770, Seq: 0, Ack: 1, Len: 0
- Source Port: 22
- Destination Port: 46770
- TCP Segment Len: 0
- Sequence number: 0 (relative sequence number)
- Acknowledgment number: 1 (relative ack number)
- 1010 .... = Header Length: 40 bytes (10)
- Window size value: 43690
- Calculated window size: 43690
- Checksum: 0x0030 [unverified]
- Urgent pointer: 0
0000
b6
b2
00
16
3a
35
85
a3
eb
49
91
0e
80
00
01
56
0010
00
28
00
00
0000
¶
²
.
.
:
5
.
£
ë
I
.
.
.
.
.
V
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 1, Ack: 1, Len: 0
- Source Port: 46770
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 1 (relative sequence number)
- Acknowledgment number: 1 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 342
- Calculated window size: 43776
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
b6
b2
00
16
3a
35
85
a3
eb
49
91
0e
80
00
01
56
0010
00
51
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
53
53
48
2d
32
2e
30
2d
4f
70
65
6e
53
53
48
5f
0030
37
2e
36
70
31
20
55
62
75
6e
74
75
2d
34
75
62
0040
75
6e
74
75
30
2e
33
0d
0a
0000
¶
²
.
.
:
5
.
£
ë
I
.
.
.
.
.
V
0010
.
Q
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
S
S
H
-
2
.
0
-
O
p
e
n
S
S
H
_
0030
7
.
6
p
1
U
b
u
n
t
u
-
4
u
b
0040
u
n
t
u
0
.
3
.
.
- Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 1, Ack: 1, Len: 41
- Source Port: 46770
- Destination Port: 22
- TCP Segment Len: 41
- Sequence number: 1 (relative sequence number)
- Acknowledgment number: 1 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 342
- Calculated window size: 43776
- Window size scaling factor: 128
- Checksum: 0x0051 [unverified]
- Urgent pointer: 0
- TCP payload (41 bytes)
- SSH Protocol
- Protocol: SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3
0000
00
16
b6
b2
eb
49
91
0e
3a
35
85
cc
80
00
01
56
0010
00
28
00
00
0000
.
.
¶
²
ë
I
.
.
:
5
.
Ì
.
.
.
V
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46770, Seq: 1, Ack: 42, Len: 0
- Source Port: 22
- Destination Port: 46770
- TCP Segment Len: 0
- Sequence number: 1 (relative sequence number)
- Acknowledgment number: 42 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 342
- Calculated window size: 43776
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
b6
b2
eb
49
91
0e
3a
35
85
cc
80
00
01
56
0010
00
51
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
53
53
48
2d
32
2e
30
2d
4f
70
65
6e
53
53
48
5f
0030
37
2e
36
70
31
20
55
62
75
6e
74
75
2d
34
75
62
0040
75
6e
74
75
30
2e
33
0d
0a
0000
.
.
¶
²
ë
I
.
.
:
5
.
Ì
.
.
.
V
0010
.
Q
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
S
S
H
-
2
.
0
-
O
p
e
n
S
S
H
_
0030
7
.
6
p
1
U
b
u
n
t
u
-
4
u
b
0040
u
n
t
u
0
.
3
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46770, Seq: 1, Ack: 42, Len: 41
- Source Port: 22
- Destination Port: 46770
- TCP Segment Len: 41
- Sequence number: 1 (relative sequence number)
- Acknowledgment number: 42 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 342
- Calculated window size: 43776
- Window size scaling factor: 128
- Checksum: 0x0051 [unverified]
- Urgent pointer: 0
- TCP payload (41 bytes)
- SSH Protocol
- Protocol: SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3
0000
b6
b2
00
16
3a
35
85
cc
eb
49
91
37
80
00
01
56
0010
00
28
00
00
0000
¶
²
.
.
:
5
.
Ì
ë
I
.
7
.
.
.
V
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 42, Ack: 42, Len: 0
- Source Port: 46770
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 42 (relative sequence number)
- Acknowledgment number: 42 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 342
- Calculated window size: 43776
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
b6
b2
eb
49
91
37
3a
35
85
cc
80
00
01
56
0010
04
60
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
04
34
06
14
3c
b7
31
f4
44
5b
58
f7
b7
63
0030
98
5d
65
1b
2e
ab
00
00
01
02
63
75
72
76
65
32
0040
35
35
31
39
2d
73
68
61
32
35
36
2c
63
75
72
76
0050
65
32
35
35
31
39
2d
73
68
61
32
35
36
40
6c
69
0060
62
73
73
68
2e
6f
72
67
2c
65
63
64
68
2d
73
68
0070
61
32
2d
6e
69
73
74
70
32
35
36
2c
65
63
64
68
0080
2d
73
68
61
32
2d
6e
69
73
74
70
33
38
34
2c
65
0090
63
64
68
2d
73
68
61
32
2d
6e
69
73
74
70
35
32
00A0
31
2c
64
69
66
66
69
65
2d
68
65
6c
6c
6d
61
6e
00B0
2d
67
72
6f
75
70
2d
65
78
63
68
61
6e
67
65
2d
00C0
73
68
61
32
35
36
2c
64
69
66
66
69
65
2d
68
65
00D0
6c
6c
6d
61
6e
2d
67
72
6f
75
70
31
36
2d
73
68
00E0
61
35
31
32
2c
64
69
66
66
69
65
2d
68
65
6c
6c
00F0
6d
61
6e
2d
67
72
6f
75
70
31
38
2d
73
68
61
35
0100
31
32
2c
64
69
66
66
69
65
2d
68
65
6c
6c
6d
61
0110
6e
2d
67
72
6f
75
70
31
34
2d
73
68
61
32
35
36
0120
2c
64
69
66
66
69
65
2d
68
65
6c
6c
6d
61
6e
2d
0130
67
72
6f
75
70
31
34
2d
73
68
61
31
00
00
00
41
0140
73
73
68
2d
72
73
61
2c
72
73
61
2d
73
68
61
32
0150
2d
35
31
32
2c
72
73
61
2d
73
68
61
32
2d
32
35
0160
36
2c
65
63
64
73
61
2d
73
68
61
32
2d
6e
69
73
0170
74
70
32
35
36
2c
73
73
68
2d
65
64
32
35
35
31
0180
39
00
00
00
6c
63
68
61
63
68
61
32
30
2d
70
6f
0190
6c
79
31
33
30
35
40
6f
70
65
6e
73
73
68
2e
63
01A0
6f
6d
2c
61
65
73
31
32
38
2d
63
74
72
2c
61
65
01B0
73
31
39
32
2d
63
74
72
2c
61
65
73
32
35
36
2d
01C0
63
74
72
2c
61
65
73
31
32
38
2d
67
63
6d
40
6f
01D0
70
65
6e
73
73
68
2e
63
6f
6d
2c
61
65
73
32
35
01E0
36
2d
67
63
6d
40
6f
70
65
6e
73
73
68
2e
63
6f
01F0
6d
00
00
00
6c
63
68
61
63
68
61
32
30
2d
70
6f
0200
6c
79
31
33
30
35
40
6f
70
65
6e
73
73
68
2e
63
0210
6f
6d
2c
61
65
73
31
32
38
2d
63
74
72
2c
61
65
0220
73
31
39
32
2d
63
74
72
2c
61
65
73
32
35
36
2d
0230
63
74
72
2c
61
65
73
31
32
38
2d
67
63
6d
40
6f
0240
70
65
6e
73
73
68
2e
63
6f
6d
2c
61
65
73
32
35
0250
36
2d
67
63
6d
40
6f
70
65
6e
73
73
68
2e
63
6f
0260
6d
00
00
00
d5
75
6d
61
63
2d
36
34
2d
65
74
6d
0270
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
75
6d
61
0280
63
2d
31
32
38
2d
65
74
6d
40
6f
70
65
6e
73
73
0290
68
2e
63
6f
6d
2c
68
6d
61
63
2d
73
68
61
32
2d
02A0
32
35
36
2d
65
74
6d
40
6f
70
65
6e
73
73
68
2e
02B0
63
6f
6d
2c
68
6d
61
63
2d
73
68
61
32
2d
35
31
02C0
32
2d
65
74
6d
40
6f
70
65
6e
73
73
68
2e
63
6f
02D0
6d
2c
68
6d
61
63
2d
73
68
61
31
2d
65
74
6d
40
02E0
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
75
6d
61
63
02F0
2d
36
34
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
0300
75
6d
61
63
2d
31
32
38
40
6f
70
65
6e
73
73
68
0310
2e
63
6f
6d
2c
68
6d
61
63
2d
73
68
61
32
2d
32
0320
35
36
2c
68
6d
61
63
2d
73
68
61
32
2d
35
31
32
0330
2c
68
6d
61
63
2d
73
68
61
31
00
00
00
d5
75
6d
0340
61
63
2d
36
34
2d
65
74
6d
40
6f
70
65
6e
73
73
0350
68
2e
63
6f
6d
2c
75
6d
61
63
2d
31
32
38
2d
65
0360
74
6d
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
68
0370
6d
61
63
2d
73
68
61
32
2d
32
35
36
2d
65
74
6d
0380
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
68
6d
61
0390
63
2d
73
68
61
32
2d
35
31
32
2d
65
74
6d
40
6f
03A0
70
65
6e
73
73
68
2e
63
6f
6d
2c
68
6d
61
63
2d
03B0
73
68
61
31
2d
65
74
6d
40
6f
70
65
6e
73
73
68
03C0
2e
63
6f
6d
2c
75
6d
61
63
2d
36
34
40
6f
70
65
03D0
6e
73
73
68
2e
63
6f
6d
2c
75
6d
61
63
2d
31
32
03E0
38
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
68
6d
03F0
61
63
2d
73
68
61
32
2d
32
35
36
2c
68
6d
61
63
0400
2d
73
68
61
32
2d
35
31
32
2c
68
6d
61
63
2d
73
0410
68
61
31
00
00
00
15
6e
6f
6e
65
2c
7a
6c
69
62
0420
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
00
00
00
15
0430
6e
6f
6e
65
2c
7a
6c
69
62
40
6f
70
65
6e
73
73
0440
68
2e
63
6f
6d
00
00
00
00
00
00
00
00
00
00
00
0450
00
00
00
00
00
00
00
00
0000
.
.
¶
²
ë
I
.
7
:
5
.
Ì
.
.
.
V
0010
.
`
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
4
.
.
<
·
1
ô
D
[
X
÷
·
c
0030
.
]
e
.
.
«
.
.
.
.
c
u
r
v
e
2
0040
5
5
1
9
-
s
h
a
2
5
6
,
c
u
r
v
0050
e
2
5
5
1
9
-
s
h
a
2
5
6
@
l
i
0060
b
s
s
h
.
o
r
g
,
e
c
d
h
-
s
h
0070
a
2
-
n
i
s
t
p
2
5
6
,
e
c
d
h
0080
-
s
h
a
2
-
n
i
s
t
p
3
8
4
,
e
0090
c
d
h
-
s
h
a
2
-
n
i
s
t
p
5
2
00A0
1
,
d
i
f
f
i
e
-
h
e
l
l
m
a
n
00B0
-
g
r
o
u
p
-
e
x
c
h
a
n
g
e
-
00C0
s
h
a
2
5
6
,
d
i
f
f
i
e
-
h
e
00D0
l
l
m
a
n
-
g
r
o
u
p
1
6
-
s
h
00E0
a
5
1
2
,
d
i
f
f
i
e
-
h
e
l
l
00F0
m
a
n
-
g
r
o
u
p
1
8
-
s
h
a
5
0100
1
2
,
d
i
f
f
i
e
-
h
e
l
l
m
a
0110
n
-
g
r
o
u
p
1
4
-
s
h
a
2
5
6
0120
,
d
i
f
f
i
e
-
h
e
l
l
m
a
n
-
0130
g
r
o
u
p
1
4
-
s
h
a
1
.
.
.
A
0140
s
s
h
-
r
s
a
,
r
s
a
-
s
h
a
2
0150
-
5
1
2
,
r
s
a
-
s
h
a
2
-
2
5
0160
6
,
e
c
d
s
a
-
s
h
a
2
-
n
i
s
0170
t
p
2
5
6
,
s
s
h
-
e
d
2
5
5
1
0180
9
.
.
.
l
c
h
a
c
h
a
2
0
-
p
o
0190
l
y
1
3
0
5
@
o
p
e
n
s
s
h
.
c
01A0
o
m
,
a
e
s
1
2
8
-
c
t
r
,
a
e
01B0
s
1
9
2
-
c
t
r
,
a
e
s
2
5
6
-
01C0
c
t
r
,
a
e
s
1
2
8
-
g
c
m
@
o
01D0
p
e
n
s
s
h
.
c
o
m
,
a
e
s
2
5
01E0
6
-
g
c
m
@
o
p
e
n
s
s
h
.
c
o
01F0
m
.
.
.
l
c
h
a
c
h
a
2
0
-
p
o
0200
l
y
1
3
0
5
@
o
p
e
n
s
s
h
.
c
0210
o
m
,
a
e
s
1
2
8
-
c
t
r
,
a
e
0220
s
1
9
2
-
c
t
r
,
a
e
s
2
5
6
-
0230
c
t
r
,
a
e
s
1
2
8
-
g
c
m
@
o
0240
p
e
n
s
s
h
.
c
o
m
,
a
e
s
2
5
0250
6
-
g
c
m
@
o
p
e
n
s
s
h
.
c
o
0260
m
.
.
.
Õ
u
m
a
c
-
6
4
-
e
t
m
0270
@
o
p
e
n
s
s
h
.
c
o
m
,
u
m
a
0280
c
-
1
2
8
-
e
t
m
@
o
p
e
n
s
s
0290
h
.
c
o
m
,
h
m
a
c
-
s
h
a
2
-
02A0
2
5
6
-
e
t
m
@
o
p
e
n
s
s
h
.
02B0
c
o
m
,
h
m
a
c
-
s
h
a
2
-
5
1
02C0
2
-
e
t
m
@
o
p
e
n
s
s
h
.
c
o
02D0
m
,
h
m
a
c
-
s
h
a
1
-
e
t
m
@
02E0
o
p
e
n
s
s
h
.
c
o
m
,
u
m
a
c
02F0
-
6
4
@
o
p
e
n
s
s
h
.
c
o
m
,
0300
u
m
a
c
-
1
2
8
@
o
p
e
n
s
s
h
0310
.
c
o
m
,
h
m
a
c
-
s
h
a
2
-
2
0320
5
6
,
h
m
a
c
-
s
h
a
2
-
5
1
2
0330
,
h
m
a
c
-
s
h
a
1
.
.
.
Õ
u
m
0340
a
c
-
6
4
-
e
t
m
@
o
p
e
n
s
s
0350
h
.
c
o
m
,
u
m
a
c
-
1
2
8
-
e
0360
t
m
@
o
p
e
n
s
s
h
.
c
o
m
,
h
0370
m
a
c
-
s
h
a
2
-
2
5
6
-
e
t
m
0380
@
o
p
e
n
s
s
h
.
c
o
m
,
h
m
a
0390
c
-
s
h
a
2
-
5
1
2
-
e
t
m
@
o
03A0
p
e
n
s
s
h
.
c
o
m
,
h
m
a
c
-
03B0
s
h
a
1
-
e
t
m
@
o
p
e
n
s
s
h
03C0
.
c
o
m
,
u
m
a
c
-
6
4
@
o
p
e
03D0
n
s
s
h
.
c
o
m
,
u
m
a
c
-
1
2
03E0
8
@
o
p
e
n
s
s
h
.
c
o
m
,
h
m
03F0
a
c
-
s
h
a
2
-
2
5
6
,
h
m
a
c
0400
-
s
h
a
2
-
5
1
2
,
h
m
a
c
-
s
0410
h
a
1
.
.
.
.
n
o
n
e
,
z
l
i
b
0420
@
o
p
e
n
s
s
h
.
c
o
m
.
.
.
.
0430
n
o
n
e
,
z
l
i
b
@
o
p
e
n
s
s
0440
h
.
c
o
m
.
.
.
.
.
.
.
.
.
.
.
0450
.
.
.
.
.
.
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46770, Seq: 42, Ack: 42, Len: 1080
- Source Port: 22
- Destination Port: 46770
- TCP Segment Len: 1080
- Sequence number: 42 (relative sequence number)
- Acknowledgment number: 42 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 342
- Calculated window size: 43776
- Window size scaling factor: 128
- Checksum: 0x0460 [unverified]
- Urgent pointer: 0
- TCP payload (1080 bytes)
- SSH Protocol
- SSH Version 2
- Packet Length: 1076
- Padding Length: 6
- Key Exchange
- Message Code: Key Exchange Init (20)
- Algorithms
- Cookie: 3cb731f4445b58f7b763985d651b2eab
- kex_algorithms length: 258
- kex_algorithms string [truncated]: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,di
- server_host_key_algorithms length: 65
- server_host_key_algorithms string: ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519
- encryption_algorithms_client_to_server length: 108
- encryption_algorithms_client_to_server string: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
- encryption_algorithms_server_to_client length: 108
- encryption_algorithms_server_to_client string: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
- mac_algorithms_client_to_server length: 213
- mac_algorithms_client_to_server string [truncated]: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-
- mac_algorithms_server_to_client length: 213
- mac_algorithms_server_to_client string [truncated]: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-
- compression_algorithms_client_to_server length: 21
- compression_algorithms_client_to_server string: none,zlib@openssh.com
- compression_algorithms_server_to_client length: 21
- compression_algorithms_server_to_client string: none,zlib@openssh.com
- languages_client_to_server length: 0
- languages_server_to_client length: 0
- First KEX Packet Follows: 0
- Reserved: 00000000
- Padding String: 000000000000
0000
b6
b2
00
16
3a
35
85
cc
eb
49
95
6f
80
00
01
67
0010
00
28
00
00
0000
¶
²
.
.
:
5
.
Ì
ë
I
.
o
.
.
.
g
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 42, Ack: 1122, Len: 0
- Source Port: 46770
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 42 (relative sequence number)
- Acknowledgment number: 1122 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 359
- Calculated window size: 45952
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
b6
b2
00
16
3a
35
85
cc
eb
49
95
6f
80
00
01
67
0010
04
e0
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
04
b4
07
14
c9
4c
b6
59
69
5d
3f
43
9e
72
0030
a1
db
1b
af
45
79
00
00
01
30
63
75
72
76
65
32
0040
35
35
31
39
2d
73
68
61
32
35
36
2c
63
75
72
76
0050
65
32
35
35
31
39
2d
73
68
61
32
35
36
40
6c
69
0060
62
73
73
68
2e
6f
72
67
2c
65
63
64
68
2d
73
68
0070
61
32
2d
6e
69
73
74
70
32
35
36
2c
65
63
64
68
0080
2d
73
68
61
32
2d
6e
69
73
74
70
33
38
34
2c
65
0090
63
64
68
2d
73
68
61
32
2d
6e
69
73
74
70
35
32
00A0
31
2c
64
69
66
66
69
65
2d
68
65
6c
6c
6d
61
6e
00B0
2d
67
72
6f
75
70
2d
65
78
63
68
61
6e
67
65
2d
00C0
73
68
61
32
35
36
2c
64
69
66
66
69
65
2d
68
65
00D0
6c
6c
6d
61
6e
2d
67
72
6f
75
70
31
36
2d
73
68
00E0
61
35
31
32
2c
64
69
66
66
69
65
2d
68
65
6c
6c
00F0
6d
61
6e
2d
67
72
6f
75
70
31
38
2d
73
68
61
35
0100
31
32
2c
64
69
66
66
69
65
2d
68
65
6c
6c
6d
61
0110
6e
2d
67
72
6f
75
70
2d
65
78
63
68
61
6e
67
65
0120
2d
73
68
61
31
2c
64
69
66
66
69
65
2d
68
65
6c
0130
6c
6d
61
6e
2d
67
72
6f
75
70
31
34
2d
73
68
61
0140
32
35
36
2c
64
69
66
66
69
65
2d
68
65
6c
6c
6d
0150
61
6e
2d
67
72
6f
75
70
31
34
2d
73
68
61
31
2c
0160
65
78
74
2d
69
6e
66
6f
2d
63
00
00
01
22
65
63
0170
64
73
61
2d
73
68
61
32
2d
6e
69
73
74
70
32
35
0180
36
2d
63
65
72
74
2d
76
30
31
40
6f
70
65
6e
73
0190
73
68
2e
63
6f
6d
2c
65
63
64
73
61
2d
73
68
61
01A0
32
2d
6e
69
73
74
70
33
38
34
2d
63
65
72
74
2d
01B0
76
30
31
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
01C0
65
63
64
73
61
2d
73
68
61
32
2d
6e
69
73
74
70
01D0
35
32
31
2d
63
65
72
74
2d
76
30
31
40
6f
70
65
01E0
6e
73
73
68
2e
63
6f
6d
2c
65
63
64
73
61
2d
73
01F0
68
61
32
2d
6e
69
73
74
70
32
35
36
2c
65
63
64
0200
73
61
2d
73
68
61
32
2d
6e
69
73
74
70
33
38
34
0210
2c
65
63
64
73
61
2d
73
68
61
32
2d
6e
69
73
74
0220
70
35
32
31
2c
73
73
68
2d
65
64
32
35
35
31
39
0230
2d
63
65
72
74
2d
76
30
31
40
6f
70
65
6e
73
73
0240
68
2e
63
6f
6d
2c
73
73
68
2d
72
73
61
2d
63
65
0250
72
74
2d
76
30
31
40
6f
70
65
6e
73
73
68
2e
63
0260
6f
6d
2c
73
73
68
2d
65
64
32
35
35
31
39
2c
72
0270
73
61
2d
73
68
61
32
2d
35
31
32
2c
72
73
61
2d
0280
73
68
61
32
2d
32
35
36
2c
73
73
68
2d
72
73
61
0290
00
00
00
1f
33
64
65
73
2d
63
62
63
2c
61
65
73
02A0
31
32
38
2d
67
63
6d
40
6f
70
65
6e
73
73
68
2e
02B0
63
6f
6d
00
00
00
1f
33
64
65
73
2d
63
62
63
2c
02C0
61
65
73
31
32
38
2d
67
63
6d
40
6f
70
65
6e
73
02D0
73
68
2e
63
6f
6d
00
00
00
d5
75
6d
61
63
2d
36
02E0
34
2d
65
74
6d
40
6f
70
65
6e
73
73
68
2e
63
6f
02F0
6d
2c
75
6d
61
63
2d
31
32
38
2d
65
74
6d
40
6f
0300
70
65
6e
73
73
68
2e
63
6f
6d
2c
68
6d
61
63
2d
0310
73
68
61
32
2d
32
35
36
2d
65
74
6d
40
6f
70
65
0320
6e
73
73
68
2e
63
6f
6d
2c
68
6d
61
63
2d
73
68
0330
61
32
2d
35
31
32
2d
65
74
6d
40
6f
70
65
6e
73
0340
73
68
2e
63
6f
6d
2c
68
6d
61
63
2d
73
68
61
31
0350
2d
65
74
6d
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
0360
2c
75
6d
61
63
2d
36
34
40
6f
70
65
6e
73
73
68
0370
2e
63
6f
6d
2c
75
6d
61
63
2d
31
32
38
40
6f
70
0380
65
6e
73
73
68
2e
63
6f
6d
2c
68
6d
61
63
2d
73
0390
68
61
32
2d
32
35
36
2c
68
6d
61
63
2d
73
68
61
03A0
32
2d
35
31
32
2c
68
6d
61
63
2d
73
68
61
31
00
03B0
00
00
d5
75
6d
61
63
2d
36
34
2d
65
74
6d
40
6f
03C0
70
65
6e
73
73
68
2e
63
6f
6d
2c
75
6d
61
63
2d
03D0
31
32
38
2d
65
74
6d
40
6f
70
65
6e
73
73
68
2e
03E0
63
6f
6d
2c
68
6d
61
63
2d
73
68
61
32
2d
32
35
03F0
36
2d
65
74
6d
40
6f
70
65
6e
73
73
68
2e
63
6f
0400
6d
2c
68
6d
61
63
2d
73
68
61
32
2d
35
31
32
2d
0410
65
74
6d
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
0420
68
6d
61
63
2d
73
68
61
31
2d
65
74
6d
40
6f
70
0430
65
6e
73
73
68
2e
63
6f
6d
2c
75
6d
61
63
2d
36
0440
34
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
75
6d
0450
61
63
2d
31
32
38
40
6f
70
65
6e
73
73
68
2e
63
0460
6f
6d
2c
68
6d
61
63
2d
73
68
61
32
2d
32
35
36
0470
2c
68
6d
61
63
2d
73
68
61
32
2d
35
31
32
2c
68
0480
6d
61
63
2d
73
68
61
31
00
00
00
1a
6e
6f
6e
65
0490
2c
7a
6c
69
62
40
6f
70
65
6e
73
73
68
2e
63
6f
04A0
6d
2c
7a
6c
69
62
00
00
00
1a
6e
6f
6e
65
2c
7a
04B0
6c
69
62
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
04C0
7a
6c
69
62
00
00
00
00
00
00
00
00
00
00
00
00
04D0
00
00
00
00
00
00
00
00
0000
¶
²
.
.
:
5
.
Ì
ë
I
.
o
.
.
.
g
0010
.
à
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
´
.
.
É
L
¶
Y
i
]
?
C
.
r
0030
¡
Û
.
¯
E
y
.
.
.
0
c
u
r
v
e
2
0040
5
5
1
9
-
s
h
a
2
5
6
,
c
u
r
v
0050
e
2
5
5
1
9
-
s
h
a
2
5
6
@
l
i
0060
b
s
s
h
.
o
r
g
,
e
c
d
h
-
s
h
0070
a
2
-
n
i
s
t
p
2
5
6
,
e
c
d
h
0080
-
s
h
a
2
-
n
i
s
t
p
3
8
4
,
e
0090
c
d
h
-
s
h
a
2
-
n
i
s
t
p
5
2
00A0
1
,
d
i
f
f
i
e
-
h
e
l
l
m
a
n
00B0
-
g
r
o
u
p
-
e
x
c
h
a
n
g
e
-
00C0
s
h
a
2
5
6
,
d
i
f
f
i
e
-
h
e
00D0
l
l
m
a
n
-
g
r
o
u
p
1
6
-
s
h
00E0
a
5
1
2
,
d
i
f
f
i
e
-
h
e
l
l
00F0
m
a
n
-
g
r
o
u
p
1
8
-
s
h
a
5
0100
1
2
,
d
i
f
f
i
e
-
h
e
l
l
m
a
0110
n
-
g
r
o
u
p
-
e
x
c
h
a
n
g
e
0120
-
s
h
a
1
,
d
i
f
f
i
e
-
h
e
l
0130
l
m
a
n
-
g
r
o
u
p
1
4
-
s
h
a
0140
2
5
6
,
d
i
f
f
i
e
-
h
e
l
l
m
0150
a
n
-
g
r
o
u
p
1
4
-
s
h
a
1
,
0160
e
x
t
-
i
n
f
o
-
c
.
.
.
"
e
c
0170
d
s
a
-
s
h
a
2
-
n
i
s
t
p
2
5
0180
6
-
c
e
r
t
-
v
0
1
@
o
p
e
n
s
0190
s
h
.
c
o
m
,
e
c
d
s
a
-
s
h
a
01A0
2
-
n
i
s
t
p
3
8
4
-
c
e
r
t
-
01B0
v
0
1
@
o
p
e
n
s
s
h
.
c
o
m
,
01C0
e
c
d
s
a
-
s
h
a
2
-
n
i
s
t
p
01D0
5
2
1
-
c
e
r
t
-
v
0
1
@
o
p
e
01E0
n
s
s
h
.
c
o
m
,
e
c
d
s
a
-
s
01F0
h
a
2
-
n
i
s
t
p
2
5
6
,
e
c
d
0200
s
a
-
s
h
a
2
-
n
i
s
t
p
3
8
4
0210
,
e
c
d
s
a
-
s
h
a
2
-
n
i
s
t
0220
p
5
2
1
,
s
s
h
-
e
d
2
5
5
1
9
0230
-
c
e
r
t
-
v
0
1
@
o
p
e
n
s
s
0240
h
.
c
o
m
,
s
s
h
-
r
s
a
-
c
e
0250
r
t
-
v
0
1
@
o
p
e
n
s
s
h
.
c
0260
o
m
,
s
s
h
-
e
d
2
5
5
1
9
,
r
0270
s
a
-
s
h
a
2
-
5
1
2
,
r
s
a
-
0280
s
h
a
2
-
2
5
6
,
s
s
h
-
r
s
a
0290
.
.
.
.
3
d
e
s
-
c
b
c
,
a
e
s
02A0
1
2
8
-
g
c
m
@
o
p
e
n
s
s
h
.
02B0
c
o
m
.
.
.
.
3
d
e
s
-
c
b
c
,
02C0
a
e
s
1
2
8
-
g
c
m
@
o
p
e
n
s
02D0
s
h
.
c
o
m
.
.
.
Õ
u
m
a
c
-
6
02E0
4
-
e
t
m
@
o
p
e
n
s
s
h
.
c
o
02F0
m
,
u
m
a
c
-
1
2
8
-
e
t
m
@
o
0300
p
e
n
s
s
h
.
c
o
m
,
h
m
a
c
-
0310
s
h
a
2
-
2
5
6
-
e
t
m
@
o
p
e
0320
n
s
s
h
.
c
o
m
,
h
m
a
c
-
s
h
0330
a
2
-
5
1
2
-
e
t
m
@
o
p
e
n
s
0340
s
h
.
c
o
m
,
h
m
a
c
-
s
h
a
1
0350
-
e
t
m
@
o
p
e
n
s
s
h
.
c
o
m
0360
,
u
m
a
c
-
6
4
@
o
p
e
n
s
s
h
0370
.
c
o
m
,
u
m
a
c
-
1
2
8
@
o
p
0380
e
n
s
s
h
.
c
o
m
,
h
m
a
c
-
s
0390
h
a
2
-
2
5
6
,
h
m
a
c
-
s
h
a
03A0
2
-
5
1
2
,
h
m
a
c
-
s
h
a
1
.
03B0
.
.
Õ
u
m
a
c
-
6
4
-
e
t
m
@
o
03C0
p
e
n
s
s
h
.
c
o
m
,
u
m
a
c
-
03D0
1
2
8
-
e
t
m
@
o
p
e
n
s
s
h
.
03E0
c
o
m
,
h
m
a
c
-
s
h
a
2
-
2
5
03F0
6
-
e
t
m
@
o
p
e
n
s
s
h
.
c
o
0400
m
,
h
m
a
c
-
s
h
a
2
-
5
1
2
-
0410
e
t
m
@
o
p
e
n
s
s
h
.
c
o
m
,
0420
h
m
a
c
-
s
h
a
1
-
e
t
m
@
o
p
0430
e
n
s
s
h
.
c
o
m
,
u
m
a
c
-
6
0440
4
@
o
p
e
n
s
s
h
.
c
o
m
,
u
m
0450
a
c
-
1
2
8
@
o
p
e
n
s
s
h
.
c
0460
o
m
,
h
m
a
c
-
s
h
a
2
-
2
5
6
0470
,
h
m
a
c
-
s
h
a
2
-
5
1
2
,
h
0480
m
a
c
-
s
h
a
1
.
.
.
.
n
o
n
e
0490
,
z
l
i
b
@
o
p
e
n
s
s
h
.
c
o
04A0
m
,
z
l
i
b
.
.
.
.
n
o
n
e
,
z
04B0
l
i
b
@
o
p
e
n
s
s
h
.
c
o
m
,
04C0
z
l
i
b
.
.
.
.
.
.
.
.
.
.
.
.
04D0
.
.
.
.
.
.
.
.
- Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 42, Ack: 1122, Len: 1208
- Source Port: 46770
- Destination Port: 22
- TCP Segment Len: 1208
- Sequence number: 42 (relative sequence number)
- Acknowledgment number: 1122 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 359
- Calculated window size: 45952
- Window size scaling factor: 128
- Checksum: 0x04e0 [unverified]
- Urgent pointer: 0
- TCP payload (1208 bytes)
- SSH Protocol
- SSH Version 2
- Packet Length: 1204
- Padding Length: 7
- Key Exchange
- Message Code: Key Exchange Init (20)
- Algorithms
- Cookie: c94cb659695d3f439e72a1db1baf4579
- kex_algorithms length: 304
- kex_algorithms string [truncated]: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,di
- server_host_key_algorithms length: 290
- server_host_key_algorithms string [truncated]: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25
- encryption_algorithms_client_to_server length: 31
- encryption_algorithms_client_to_server string: 3des-cbc,aes128-gcm@openssh.com
- encryption_algorithms_server_to_client length: 31
- encryption_algorithms_server_to_client string: 3des-cbc,aes128-gcm@openssh.com
- mac_algorithms_client_to_server length: 213
- mac_algorithms_client_to_server string [truncated]: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-
- mac_algorithms_server_to_client length: 213
- mac_algorithms_server_to_client string [truncated]: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-
- compression_algorithms_client_to_server length: 26
- compression_algorithms_client_to_server string: none,zlib@openssh.com,zlib
- compression_algorithms_server_to_client length: 26
- compression_algorithms_server_to_client string: none,zlib@openssh.com,zlib
- languages_client_to_server length: 0
- languages_server_to_client length: 0
- First KEX Packet Follows: 0
- Reserved: 00000000
- Padding String: 00000000000000
0000
00
16
b6
b2
eb
49
95
6f
3a
35
8a
84
80
00
05
55
0010
00
28
00
00
0000
.
.
¶
²
ë
I
.
o
:
5
.
.
.
.
.
U
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46770, Seq: 1122, Ack: 1250, Len: 0
- Source Port: 22
- Destination Port: 46770
- TCP Segment Len: 0
- Sequence number: 1122 (relative sequence number)
- Acknowledgment number: 1250 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1365
- Calculated window size: 174720
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
b6
b2
00
16
3a
35
8a
84
eb
49
95
6f
80
00
01
67
0010
00
58
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
00
2c
06
1e
00
00
00
20
9d
dc
3e
5d
f9
03
0030
a3
ac
9a
de
17
1b
2e
4f
75
15
97
61
e9
9e
8d
91
0040
e0
88
73
44
8e
d3
4d
b8
27
75
00
00
00
00
00
00
0000
¶
²
.
.
:
5
.
.
ë
I
.
o
.
.
.
g
0010
.
X
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
,
.
.
.
.
.
.
Ü
>
]
ù
.
0030
£
¬
.
Þ
.
.
.
O
u
.
.
a
é
.
.
.
0040
à
.
s
D
.
Ó
M
¸
'
u
.
.
.
.
.
.
- Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 1250, Ack: 1122, Len: 48
- Source Port: 46770
- Destination Port: 22
- TCP Segment Len: 48
- Sequence number: 1250 (relative sequence number)
- Acknowledgment number: 1122 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 359
- Calculated window size: 45952
- Window size scaling factor: 128
- Checksum: 0x0058 [unverified]
- Urgent pointer: 0
- TCP payload (48 bytes)
- SSH Protocol
- SSH Version 2
- Packet Length: 44
- Padding Length: 6
- Key Exchange
- Message Code: Diffie-Hellman Key Exchange Init (30)
- Multi Precision Integer Length: 32
- DH client e: 9ddc3e5df903a3ac9ade171b2e4f75159761e99e8d91e088...
- Padding String: 000000000000
0000
00
16
b6
b2
eb
49
95
6f
3a
35
8a
b4
80
00
05
55
0010
01
f4
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
01
04
0a
1f
00
00
00
68
00
00
00
13
65
63
0030
64
73
61
2d
73
68
61
32
2d
6e
69
73
74
70
32
35
0040
36
00
00
00
08
6e
69
73
74
70
32
35
36
00
00
00
0050
41
04
13
78
67
bd
71
5d
44
ac
fd
00
d6
aa
2a
ac
0060
a0
35
a3
26
f9
00
74
41
36
ef
28
a6
45
61
10
54
0070
ac
c8
b6
ac
57
91
22
93
9a
ae
25
2f
40
98
03
bb
0080
fe
8e
2c
dc
83
ee
fe
d2
e9
1a
5d
7c
ed
f8
87
ea
0090
c5
e8
00
00
00
20
95
05
11
cd
bc
a3
82
ad
78
97
00A0
b8
16
fa
4c
ca
2e
27
cf
67
1f
a6
bb
7a
c4
4c
51
00B0
ed
63
f2
74
44
72
00
00
00
64
00
00
00
13
65
63
00C0
64
73
61
2d
73
68
61
32
2d
6e
69
73
74
70
32
35
00D0
36
00
00
00
49
00
00
00
21
00
ee
09
9b
83
7f
03
00E0
4f
49
df
23
c1
49
7b
b2
c9
30
b1
a8
b0
aa
55
65
00F0
e9
4e
35
67
d0
cb
70
e3
54
64
00
00
00
20
77
d0
0100
10
76
c8
cc
78
6e
7e
ef
6b
67
32
b1
a6
6e
94
d0
0110
74
b8
d6
61
4e
54
6f
02
d8
66
64
42
76
59
00
00
0120
00
00
00
00
00
00
00
00
00
00
00
0c
0a
15
00
00
0130
00
00
00
00
00
00
00
00
00
00
00
a0
9a
22
b7
a9
0140
20
a7
0e
55
13
7c
43
bc
d1
72
9a
eb
2c
ad
20
97
0150
b9
7f
61
b8
45
af
cc
ed
a0
f3
a4
a3
ae
37
03
d7
0160
fa
75
f1
91
95
0d
9d
cc
81
62
dd
b6
2a
db
05
4e
0170
2a
c4
5a
9f
10
c3
0e
e2
e8
77
f6
0b
62
89
9f
3d
0180
2d
35
10
40
ca
94
79
7b
cb
0e
fe
b3
7e
01
a2
00
0190
61
96
f3
ea
d6
ce
80
f2
2c
45
eb
bf
26
a3
17
b8
01A0
f9
4d
df
5d
07
6b
5a
36
c3
1a
ba
46
6e
d1
20
c0
01B0
8b
0a
af
10
7b
9e
ea
49
b9
0c
6e
9f
c2
af
aa
55
01C0
d0
c3
66
1e
d5
0e
3a
59
e0
07
9a
5b
1c
51
9e
a5
01D0
ab
19
77
51
d7
e4
5d
d5
06
95
b4
45
48
5e
0a
56
01E0
97
bf
15
c5
51
00
26
75
e9
13
52
a7
0000
.
.
¶
²
ë
I
.
o
:
5
.
´
.
.
.
U
0010
.
ô
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
.
.
.
.
.
.
h
.
.
.
.
e
c
0030
d
s
a
-
s
h
a
2
-
n
i
s
t
p
2
5
0040
6
.
.
.
.
n
i
s
t
p
2
5
6
.
.
.
0050
A
.
.
x
g
½
q
]
D
¬
ý
.
Ö
ª
*
¬
0060
.
5
£
&
ù
.
t
A
6
ï
(
¦
E
a
.
T
0070
¬
È
¶
¬
W
.
"
.
.
®
%
/
@
.
.
»
0080
þ
.
,
Ü
.
î
þ
Ò
é
.
]
|
í
ø
.
ê
0090
Å
è
.
.
.
.
.
.
Í
¼
£
.
.
x
.
00A0
¸
.
ú
L
Ê
.
'
Ï
g
.
¦
»
z
Ä
L
Q
00B0
í
c
ò
t
D
r
.
.
.
d
.
.
.
.
e
c
00C0
d
s
a
-
s
h
a
2
-
n
i
s
t
p
2
5
00D0
6
.
.
.
I
.
.
.
!
.
î
.
.
.
.
.
00E0
O
I
ß
#
Á
I
{
²
É
0
±
¨
°
ª
U
e
00F0
é
N
5
g
Ð
Ë
p
ã
T
d
.
.
.
w
Ð
0100
.
v
È
Ì
x
n
~
ï
k
g
2
±
¦
n
.
Ð
0110
t
¸
Ö
a
N
T
o
.
Ø
f
d
B
v
Y
.
.
0120
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0130
.
.
.
.
.
.
.
.
.
.
.
.
.
"
·
©
0140
§
.
U
.
|
C
¼
Ñ
r
.
ë
,
.
.
0150
¹
.
a
¸
E
¯
Ì
í
.
ó
¤
£
®
7
.
×
0160
ú
u
ñ
.
.
.
.
Ì
.
b
Ý
¶
*
Û
.
N
0170
*
Ä
Z
.
.
Ã
.
â
è
w
ö
.
b
.
.
=
0180
-
5
.
@
Ê
.
y
{
Ë
.
þ
³
~
.
¢
.
0190
a
.
ó
ê
Ö
Î
.
ò
,
E
ë
¿
&
£
.
¸
01A0
ù
M
ß
]
.
k
Z
6
Ã
.
º
F
n
Ñ
À
01B0
.
.
¯
.
{
.
ê
I
¹
.
n
.
Â
¯
ª
U
01C0
Ð
Ã
f
.
Õ
.
:
Y
à
.
.
[
.
Q
.
¥
01D0
«
.
w
Q
×
ä
]
Õ
.
.
´
E
H
^
.
V
01E0
.
¿
.
Å
Q
.
&
u
é
.
R
§
- Transmission Control Protocol, Src Port: 22, Dst Port: 46770, Seq: 1122, Ack: 1298, Len: 460
- Source Port: 22
- Destination Port: 46770
- TCP Segment Len: 460
- Sequence number: 1122 (relative sequence number)
- Acknowledgment number: 1298 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1365
- Calculated window size: 174720
- Window size scaling factor: 128
- Checksum: 0x01f4 [unverified]
- Urgent pointer: 0
- TCP payload (460 bytes)
- SSH Protocol
- SSH Version 2
- Packet Length: 260
- Padding Length: 10
- Key Exchange
- Message Code: Diffie-Hellman Key Exchange Reply (31)
- KEX host key (type: ecdsa-sha2-nistp256)
- Host key length: 104
- Host key type: ecdsa-sha2-nistp256
- ECDSA elliptic curve identifier length: 8
- ECDSA elliptic curve identifier: nistp256
- ECDSA public key length: 65
- ECDSA public key (Q): 04137867bd715d44acfd00d6aa2aaca035a326f900744136...
- Multi Precision Integer Length: 32
- DH server f: 950511cdbca382ad7897b816fa4cca2e27cf671fa6bb7ac4...
- KEX H signature length: 100
- KEX H signature: 0000001365636473612d736861322d6e6973747032353600...
- Padding String: 00000000000000000000
- SSH Version 2
- Packet Length: 12
- Padding Length: 10
- Key Exchange
- Message Code: New Keys (21)
- Padding String: 00000000000000000000
- SSH Version 2 (encryption:aes128-gcm@openssh.com mac: compression:none)
- Packet Length: 160
- Encrypted Packet: 9a22b7a920a70e55137c43bcd1729aeb2cad2097b97f61b8...
- MAC: 485e0a5697bf15c551002675e91352a7
0000
b6
b2
00
16
3a
35
8a
b4
eb
49
97
3b
80
00
01
78
0010
00
38
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
00
0c
0a
15
00
00
00
00
00
00
00
00
00
00
0000
¶
²
.
.
:
5
.
´
ë
I
.
;
.
.
.
x
0010
.
8
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
- Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 1298, Ack: 1582, Len: 16
- Source Port: 46770
- Destination Port: 22
- TCP Segment Len: 16
- Sequence number: 1298 (relative sequence number)
- Acknowledgment number: 1582 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 376
- Calculated window size: 48128
- Window size scaling factor: 128
- Checksum: 0x0038 [unverified]
- Urgent pointer: 0
- TCP payload (16 bytes)
- SSH Protocol
- SSH Version 2
- Packet Length: 12
- Padding Length: 10
- Key Exchange
- Message Code: New Keys (21)
- Padding String: 00000000000000000000
0000
00
16
b6
b2
eb
49
97
3b
3a
35
8a
c4
80
00
05
55
0010
00
28
00
00
0000
.
.
¶
²
ë
I
.
;
:
5
.
Ä
.
.
.
U
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46770, Seq: 1582, Ack: 1314, Len: 0
- Source Port: 22
- Destination Port: 46770
- TCP Segment Len: 0
- Sequence number: 1582 (relative sequence number)
- Acknowledgment number: 1314 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1365
- Calculated window size: 174720
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
b6
b2
00
16
3a
35
8a
c4
eb
49
97
3b
80
00
01
78
0010
00
5c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
00
20
7c
a1
2a
ab
9d
45
63
74
55
1d
9c
19
0030
c9
a9
a5
f8
6b
9b
16
1f
6d
9c
dd
de
87
05
73
0b
0040
48
4a
19
66
44
f8
d8
63
4a
dc
c0
61
8f
98
52
10
0050
20
d7
c6
f9
0000
¶
²
.
.
:
5
.
Ä
ë
I
.
;
.
.
.
x
0010
.
\
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
|
¡
*
«
.
E
c
t
U
.
.
.
0030
É
©
¥
ø
k
.
.
.
m
.
Ý
Þ
.
.
s
.
0040
H
J
.
f
D
ø
Ø
c
J
Ü
À
a
.
.
R
.
0050
×
Æ
ù
- Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 1314, Ack: 1582, Len: 52
- Source Port: 46770
- Destination Port: 22
- TCP Segment Len: 52
- Sequence number: 1314 (relative sequence number)
- Acknowledgment number: 1582 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 376
- Calculated window size: 48128
- Window size scaling factor: 128
- Checksum: 0x005c [unverified]
- Urgent pointer: 0
- TCP payload (52 bytes)
- SSH Protocol
- SSH Version 2 (encryption:aes128-gcm@openssh.com mac: compression:none)
- Packet Length: 32
- Encrypted Packet: 7ca12aab9d456374551d9c19c9a9a5f86b9b161f6d9cddde...
- MAC: 44f8d8634adcc0618f98521020d7c6f9
0000
00
16
b6
b2
eb
49
97
3b
3a
35
8a
f8
80
00
05
55
0010
00
28
00
00
0000
.
.
¶
²
ë
I
.
;
:
5
.
ø
.
.
.
U
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46770, Seq: 1582, Ack: 1366, Len: 0
- Source Port: 22
- Destination Port: 46770
- TCP Segment Len: 0
- Sequence number: 1582 (relative sequence number)
- Acknowledgment number: 1366 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1365
- Calculated window size: 174720
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
b6
b2
eb
49
97
3b
3a
35
8a
f8
80
00
05
55
0010
00
5c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
00
20
1c
9d
a8
fd
f1
72
1e
5d
58
0f
d5
01
0030
e4
7c
0a
26
2a
9c
55
f2
78
80
d4
7b
1e
ed
0c
fc
0040
7f
81
48
a3
ef
0e
4e
70
e6
29
a9
82
ca
f3
3f
44
0050
51
31
39
15
0000
.
.
¶
²
ë
I
.
;
:
5
.
ø
.
.
.
U
0010
.
\
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
.
.
¨
ý
ñ
r
.
]
X
.
Õ
.
0030
ä
|
.
&
*
.
U
ò
x
.
Ô
{
.
í
.
ü
0040
.
.
H
£
ï
.
N
p
æ
)
©
.
Ê
ó
?
D
0050
Q
1
9
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46770, Seq: 1582, Ack: 1366, Len: 52
- Source Port: 22
- Destination Port: 46770
- TCP Segment Len: 52
- Sequence number: 1582 (relative sequence number)
- Acknowledgment number: 1366 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1365
- Calculated window size: 174720
- Window size scaling factor: 128
- Checksum: 0x005c [unverified]
- Urgent pointer: 0
- TCP payload (52 bytes)
- SSH Protocol
- SSH Version 2 (encryption:aes128-gcm@openssh.com mac: compression:none)
- Packet Length: 32
- Encrypted Packet: 1c9da8fdf1721e5d580fd501e47c0a262a9c55f27880d47b...
- MAC: ef0e4e70e629a982caf33f4451313915
0000
b6
b2
00
16
3a
35
8a
f8
eb
49
97
6f
80
00
01
78
0010
00
6c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
00
30
5f
79
16
42
ce
20
4c
f8
63
1c
b5
6a
0030
09
54
5a
d3
b5
dc
3f
c5
21
61
02
80
51
4f
28
da
0040
31
9a
bd
d3
dd
70
34
2f
cc
13
e6
f9
12
c5
5e
4b
0050
4f
3a
cf
47
85
c1
dd
8f
5a
9f
1c
71
53
bb
3a
9c
0060
22
dc
67
25
0000
¶
²
.
.
:
5
.
ø
ë
I
.
o
.
.
.
x
0010
.
l
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
0
_
y
.
B
Î
L
ø
c
.
µ
j
0030
.
T
Z
Ó
µ
Ü
?
Å
!
a
.
.
Q
O
(
Ú
0040
1
.
½
Ó
Ý
p
4
/
Ì
.
æ
ù
.
Å
^
K
0050
O
:
Ï
G
.
Á
Ý
.
Z
.
.
q
S
»
:
.
0060
"
Ü
g
%
- Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 1366, Ack: 1634, Len: 68
- Source Port: 46770
- Destination Port: 22
- TCP Segment Len: 68
- Sequence number: 1366 (relative sequence number)
- Acknowledgment number: 1634 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 376
- Calculated window size: 48128
- Window size scaling factor: 128
- Checksum: 0x006c [unverified]
- Urgent pointer: 0
- TCP payload (68 bytes)
- SSH Protocol
- SSH Version 2 (encryption:aes128-gcm@openssh.com mac: compression:none)
- Packet Length: 48
- Encrypted Packet: 5f791642ce204cf8631cb56a09545ad3b5dc3fc521610280...
- MAC: 85c1dd8f5a9f1c7153bb3a9c22dc6725
0000
00
16
b6
b2
eb
49
97
6f
3a
35
8b
3c
80
00
05
55
0010
00
5c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
00
20
97
ea
16
5d
08
24
37
60
4e
69
76
65
0030
d2
fe
b1
f9
82
79
59
52
15
fb
54
70
8c
53
06
fc
0040
60
ae
1c
bf
9e
7f
1d
ef
e3
cc
62
93
0c
dd
52
42
0050
f4
90
fe
e6
0000
.
.
¶
²
ë
I
.
o
:
5
.
<
.
.
.
U
0010
.
\
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
.
ê
.
]
.
$
7
`
N
i
v
e
0030
Ò
þ
±
ù
.
y
Y
R
.
û
T
p
.
S
.
ü
0040
`
®
.
¿
.
.
.
ï
ã
Ì
b
.
.
Ý
R
B
0050
ô
.
þ
æ
- Transmission Control Protocol, Src Port: 22, Dst Port: 46770, Seq: 1634, Ack: 1434, Len: 52
- Source Port: 22
- Destination Port: 46770
- TCP Segment Len: 52
- Sequence number: 1634 (relative sequence number)
- Acknowledgment number: 1434 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1365
- Calculated window size: 174720
- Window size scaling factor: 128
- Checksum: 0x005c [unverified]
- Urgent pointer: 0
- TCP payload (52 bytes)
- SSH Protocol
- SSH Version 2 (encryption:aes128-gcm@openssh.com mac: compression:none)
- Packet Length: 32
- Encrypted Packet: 97ea165d082437604e697665d2feb1f98279595215fb5470...
- MAC: 9e7f1defe3cc62930cdd5242f490fee6
0000
b6
b2
00
16
3a
35
8b
3c
eb
49
97
a3
80
00
01
78
0010
01
9c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
01
60
86
76
65
b7
bd
11
e1
88
fd
0e
c7
59
0030
97
01
07
64
fc
56
af
ee
93
21
be
ad
f1
bb
0f
e1
0040
4c
27
89
29
68
98
1c
48
e5
85
21
f7
d7
5d
94
95
0050
a5
8d
07
0f
ab
ae
90
d1
7a
0a
30
8f
41
ef
dc
fc
0060
e2
0f
ec
b0
5c
3e
01
bf
0f
07
06
59
2f
bc
22
1e
0070
42
aa
b3
08
05
1e
c7
41
cd
f0
9f
ab
a8
37
46
79
0080
31
b1
8c
02
b2
4c
9f
c9
fb
7b
2c
81
e5
ef
e2
94
0090
ee
b0
4c
63
21
41
3e
8b
0b
dd
6a
1e
5e
59
6a
68
00A0
1f
de
53
59
36
52
c8
c2
ef
ce
33
54
14
e0
fa
26
00B0
cf
6d
51
b6
0f
d8
d7
e2
33
f7
ea
b7
50
3b
a8
d0
00C0
2f
40
3c
fb
26
0e
6a
17
c4
d1
ea
97
99
75
1a
45
00D0
9a
b3
37
82
d2
d8
6c
f6
96
0e
02
80
a0
35
fa
bc
00E0
50
04
54
48
ec
5d
da
c2
d2
4a
b7
03
ae
de
5c
b5
00F0
27
cb
10
ad
50
9c
1a
2f
c4
50
0a
13
d7
5f
46
6f
0100
70
9d
f3
05
e7
2b
0d
10
cc
5d
6a
6a
50
69
79
6f
0110
9f
29
5b
74
34
0f
cf
70
ff
20
15
8a
87
7f
8d
00
0120
81
b2
b0
07
e9
f5
b3
75
ae
c6
1c
c2
dc
eb
ee
55
0130
44
75
16
c1
d3
bf
93
60
1c
1e
3c
e6
20
40
a4
67
0140
fd
12
54
cb
71
8e
0d
15
cf
45
2e
7c
87
a3
10
85
0150
bf
20
f7
f3
fb
57
8b
a0
84
a0
3d
67
00
2b
c5
80
0160
12
f6
9c
35
2d
86
61
d8
83
57
2f
92
db
8c
74
50
0170
ac
cc
42
60
96
33
f3
a2
75
c1
1d
2a
56
81
8f
0f
0180
e8
11
02
fc
2f
66
30
e1
f5
67
c0
85
de
de
cb
a9
0190
e8
99
6c
f3
0000
¶
²
.
.
:
5
.
<
ë
I
.
£
.
.
.
x
0010
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
`
.
v
e
·
½
.
á
.
ý
.
Ç
Y
0030
.
.
.
d
ü
V
¯
î
.
!
¾
.
ñ
»
.
á
0040
L
'
.
)
h
.
.
H
å
.
!
÷
×
]
.
.
0050
¥
.
.
.
«
®
.
Ñ
z
.
0
.
A
ï
Ü
ü
0060
â
.
ì
°
\
>
.
¿
.
.
.
Y
/
¼
"
.
0070
B
ª
³
.
.
.
Ç
A
Í
ð
.
«
¨
7
F
y
0080
1
±
.
.
²
L
.
É
û
{
,
.
å
ï
â
.
0090
î
°
L
c
!
A
>
.
.
Ý
j
.
^
Y
j
h
00A0
.
Þ
S
Y
6
R
È
Â
ï
Î
3
T
.
à
ú
&
00B0
Ï
m
Q
¶
.
Ø
×
â
3
÷
ê
·
P
;
¨
Ð
00C0
/
@
<
û
&
.
j
.
Ä
Ñ
ê
.
.
u
.
E
00D0
.
³
7
.
Ò
Ø
l
ö
.
.
.
.
.
5
ú
¼
00E0
P
.
T
H
ì
]
Ú
Â
Ò
J
·
.
®
Þ
\
µ
00F0
'
Ë
.
.
P
.
.
/
Ä
P
.
.
×
_
F
o
0100
p
.
ó
.
ç
+
.
.
Ì
]
j
j
P
i
y
o
0110
.
)
[
t
4
.
Ï
p
ÿ
.
.
.
.
.
.
0120
.
²
°
.
é
õ
³
u
®
Æ
.
Â
Ü
ë
î
U
0130
D
u
.
Á
Ó
¿
.
`
.
.
<
æ
@
¤
g
0140
ý
.
T
Ë
q
.
.
.
Ï
E
.
|
.
£
.
.
0150
¿
÷
ó
û
W
.
.
.
.
=
g
.
+
Å
.
0160
.
ö
.
5
-
.
a
Ø
.
W
/
.
Û
.
t
P
0170
¬
Ì
B
`
.
3
ó
¢
u
Á
.
*
V
.
.
.
0180
è
.
.
ü
/
f
0
á
õ
g
À
.
Þ
Þ
Ë
©
0190
è
.
l
ó
- Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 1434, Ack: 1686, Len: 372
- Source Port: 46770
- Destination Port: 22
- TCP Segment Len: 372
- Sequence number: 1434 (relative sequence number)
- Acknowledgment number: 1686 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 376
- Calculated window size: 48128
- Window size scaling factor: 128
- Checksum: 0x019c [unverified]
- Urgent pointer: 0
- TCP payload (372 bytes)
- SSH Protocol
- SSH Version 2 (encryption:aes128-gcm@openssh.com mac: compression:none)
- Packet Length: 352
- Encrypted Packet: 867665b7bd11e188fd0ec75997010764fc56afee9321bead...
- MAC: 2f6630e1f567c085dedecba9e8996cf3
0000
00
16
b6
b2
eb
49
97
a3
3a
35
8c
b0
80
00
05
68
0010
00
5c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
00
20
90
ae
1e
4e
28
e8
bd
27
7a
04
d5
2e
0030
ad
8f
a3
a4
3e
4d
78
1c
b9
52
59
18
9b
71
a2
2e
0040
d3
9e
92
47
b4
31
89
0b
85
1b
36
3e
de
ff
8c
2b
0050
97
00
42
ba
0000
.
.
¶
²
ë
I
.
£
:
5
.
°
.
.
.
h
0010
.
\
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
.
®
.
N
(
è
½
'
z
.
Õ
.
0030
.
.
£
¤
>
M
x
.
¹
R
Y
.
.
q
¢
.
0040
Ó
.
.
G
´
1
.
.
.
.
6
>
Þ
ÿ
.
+
0050
.
.
B
º
- Transmission Control Protocol, Src Port: 22, Dst Port: 46770, Seq: 1686, Ack: 1806, Len: 52
- Source Port: 22
- Destination Port: 46770
- TCP Segment Len: 52
- Sequence number: 1686 (relative sequence number)
- Acknowledgment number: 1806 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1384
- Calculated window size: 177152
- Window size scaling factor: 128
- Checksum: 0x005c [unverified]
- Urgent pointer: 0
- TCP payload (52 bytes)
- SSH Protocol
- SSH Version 2 (encryption:aes128-gcm@openssh.com mac: compression:none)
- Packet Length: 32
- Encrypted Packet: 90ae1e4e28e8bd277a04d52ead8fa3a43e4d781cb9525918...
- MAC: b431890b851b363edeff8c2b970042ba
0000
b6
b2
00
16
3a
35
8c
b0
eb
49
97
d7
80
00
01
78
0010
00
28
00
00
0000
¶
²
.
.
:
5
.
°
ë
I
.
×
.
.
.
x
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 1806, Ack: 1738, Len: 0
- Source Port: 46770
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 1806 (relative sequence number)
- Acknowledgment number: 1738 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 376
- Calculated window size: 48128
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
b6
b2
00
16
3a
35
8c
b0
eb
49
97
d7
80
00
01
78
0010
00
bc
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
00
80
03
1b
22
a2
5f
d6
71
4f
db
0d
f1
27
0030
55
1a
77
98
1d
21
8e
f8
32
3d
5e
d5
7c
b7
81
33
0040
4c
09
1e
4c
3a
9a
06
66
ae
85
5b
72
c4
4b
98
89
0050
89
fa
02
09
0a
e9
d4
46
b0
bf
d4
a7
5c
b4
a6
98
0060
be
43
b5
36
a6
eb
e8
9b
68
be
63
60
d8
05
e0
66
0070
88
1c
7e
5a
ac
10
c4
38
76
f3
aa
9e
44
c1
9f
4d
0080
e2
97
b4
b9
7f
50
c0
8e
15
6c
b4
3a
c8
a0
c0
3b
0090
b8
60
2b
61
15
87
14
50
13
19
e2
15
b6
45
8b
49
00A0
0c
63
d0
1b
97
a0
6b
8f
06
fb
97
76
dd
44
6c
bf
00B0
9e
73
0f
df
0000
¶
²
.
.
:
5
.
°
ë
I
.
×
.
.
.
x
0010
.
¼
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
.
.
.
"
¢
_
Ö
q
O
Û
.
ñ
'
0030
U
.
w
.
.
!
.
ø
2
=
^
Õ
|
·
.
3
0040
L
.
.
L
:
.
.
f
®
.
[
r
Ä
K
.
.
0050
.
ú
.
.
.
é
Ô
F
°
¿
Ô
§
\
´
¦
.
0060
¾
C
µ
6
¦
ë
è
.
h
¾
c
`
Ø
.
à
f
0070
.
.
~
Z
¬
.
Ä
8
v
ó
ª
.
D
Á
.
M
0080
â
.
´
¹
.
P
À
.
.
l
´
:
È
.
À
;
0090
¸
`
+
a
.
.
.
P
.
.
â
.
¶
E
.
I
00A0
.
c
Ð
.
.
.
k
.
.
û
.
v
Ý
D
l
¿
00B0
.
s
.
ß
- Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 1806, Ack: 1738, Len: 148
- Source Port: 46770
- Destination Port: 22
- TCP Segment Len: 148
- Sequence number: 1806 (relative sequence number)
- Acknowledgment number: 1738 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 376
- Calculated window size: 48128
- Window size scaling factor: 128
- Checksum: 0x00bc [unverified]
- Urgent pointer: 0
- TCP payload (148 bytes)
- SSH Protocol
- SSH Version 2 (encryption:aes128-gcm@openssh.com mac: compression:none)
- Packet Length: 128
- Encrypted Packet: 031b22a25fd6714fdb0df127551a77981d218ef8323d5ed5...
- MAC: 97a06b8f06fb9776dd446cbf9e730fdf
0000
00
16
b6
b2
eb
49
97
d7
3a
35
8d
44
80
00
05
7a
0010
00
4c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
00
10
fc
f7
27
aa
10
54
26
88
9d
07
e5
10
0030
b9
38
89
5e
2b
ec
7e
2c
b5
46
ef
b2
72
78
2a
c6
0040
06
11
14
79
0000
.
.
¶
²
ë
I
.
×
:
5
.
D
.
.
.
z
0010
.
L
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
.
ü
÷
'
ª
.
T
&
.
.
.
å
.
0030
¹
8
.
^
+
ì
~
,
µ
F
ï
²
r
x
*
Æ
0040
.
.
.
y
- Transmission Control Protocol, Src Port: 22, Dst Port: 46770, Seq: 1738, Ack: 1954, Len: 36
- Source Port: 22
- Destination Port: 46770
- TCP Segment Len: 36
- Sequence number: 1738 (relative sequence number)
- Acknowledgment number: 1954 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1402
- Calculated window size: 179456
- Window size scaling factor: 128
- Checksum: 0x004c [unverified]
- Urgent pointer: 0
- TCP payload (36 bytes)
- SSH Protocol
- SSH Version 2 (encryption:aes128-gcm@openssh.com mac: compression:none)
- Packet Length: 16
- Encrypted Packet: fcf727aa105426889d07e510b938895e
- MAC: 2bec7e2cb546efb272782ac606111479
0000
b6
b2
00
16
3a
35
8d
44
eb
49
97
fb
80
00
01
78
0010
00
28
00
00
0000
¶
²
.
.
:
5
.
D
ë
I
.
û
.
.
.
x
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 1954, Ack: 1774, Len: 0
- Source Port: 46770
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 1954 (relative sequence number)
- Acknowledgment number: 1774 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 376
- Calculated window size: 48128
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
b6
b2
00
16
3a
35
8d
44
eb
49
97
fb
80
00
01
78
0010
00
a0
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
00
20
cf
c0
07
32
50
fd
75
5a
b3
dd
96
06
0030
0f
25
d8
3f
f2
39
81
b4
c3
90
25
83
38
24
5a
c3
0040
f3
e4
c4
59
10
25
82
84
2e
34
f9
03
bb
c0
29
f5
0050
f1
94
e8
06
00
00
00
30
db
e4
f2
71
6a
51
3c
c0
0060
68
1c
11
9e
e0
40
f8
e6
e4
08
bc
76
42
a9
6d
6d
0070
3f
77
8e
77
d8
9d
15
20
31
a9
f2
79
86
74
75
5b
0080
4f
65
5e
2d
b5
7c
00
88
7d
d6
5c
35
22
7b
e0
d6
0090
85
cf
e5
40
f2
da
e0
1c
0000
¶
²
.
.
:
5
.
D
ë
I
.
û
.
.
.
x
0010
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
Ï
À
.
2
P
ý
u
Z
³
Ý
.
.
0030
.
%
Ø
?
ò
9
.
´
Ã
.
%
.
8
$
Z
Ã
0040
ó
ä
Ä
Y
.
%
.
.
.
4
ù
.
»
À
)
õ
0050
ñ
.
è
.
.
.
.
0
Û
ä
ò
q
j
Q
<
À
0060
h
.
.
.
à
@
ø
æ
ä
.
¼
v
B
©
m
m
0070
?
w
.
w
Ø
.
.
1
©
ò
y
.
t
u
[
0080
O
e
^
-
µ
|
.
.
}
Ö
\
5
"
{
à
Ö
0090
.
Ï
å
@
ò
Ú
à
.
- Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 1954, Ack: 1774, Len: 120
- Source Port: 46770
- Destination Port: 22
- TCP Segment Len: 120
- Sequence number: 1954 (relative sequence number)
- Acknowledgment number: 1774 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 376
- Calculated window size: 48128
- Window size scaling factor: 128
- Checksum: 0x00a0 [unverified]
- Urgent pointer: 0
- TCP payload (120 bytes)
- SSH Protocol
- SSH Version 2 (encryption:aes128-gcm@openssh.com mac: compression:none)
- Packet Length: 32
- Encrypted Packet: cfc0073250fd755ab3dd96060f25d83ff23981b4c3902583...
- MAC: 7dd65c35227be0d685cfe540f2dae01c
0000
00
16
b6
b2
eb
49
97
fb
3a
35
8d
bc
80
00
05
7a
0010
00
28
00
00
0000
.
.
¶
²
ë
I
.
û
:
5
.
¼
.
.
.
z
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46770, Seq: 1774, Ack: 2074, Len: 0
- Source Port: 22
- Destination Port: 46770
- TCP Segment Len: 0
- Sequence number: 1774 (relative sequence number)
- Acknowledgment number: 2074 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1402
- Calculated window size: 179456
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
b6
b2
eb
49
97
fb
3a
35
8d
bc
80
00
05
7a
0010
03
dc
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
03
a0
c3
2c
91
d7
a3
ac
7b
78
80
3e
be
91
0030
5d
08
46
4e
5e
62
10
1d
8c
8e
cd
92
ad
6a
90
72
0040
95
cc
2c
eb
c3
28
bd
d4
df
c7
e7
f3
73
ea
31
16
0050
73
d6
93
30
c0
41
6e
78
8c
e8
d7
c5
76
74
6d
92
0060
2e
09
5d
a4
94
57
35
ae
c2
90
cd
5a
12
99
86
27
0070
4a
5d
c8
80
3a
b1
43
23
f6
d4
bd
be
d3
dc
18
21
0080
af
30
83
66
66
b1
ae
b2
93
96
b5
7b
1d
2c
87
7b
0090
1f
89
80
72
79
90
ff
e2
73
4b
0f
24
f1
08
b6
a7
00A0
fa
af
2e
d7
69
5b
2a
04
ce
a5
8d
c3
27
bc
26
95
00B0
63
73
fa
f4
ef
59
dd
dc
5d
31
1e
95
55
07
2a
1c
00C0
ee
41
fa
10
f5
a6
9b
a0
3d
3f
e4
84
9a
ea
b6
87
00D0
fb
e9
0d
e5
6f
d2
bd
f2
8f
af
df
28
a5
96
db
b8
00E0
44
a2
ee
b3
d8
05
2a
1f
a6
f3
97
ec
14
4f
c3
ad
00F0
9d
05
e1
85
c6
b8
28
29
64
df
c3
74
50
75
e7
4d
0100
bf
bc
e6
d4
4e
12
c0
a9
e8
b6
34
9a
c4
29
6a
5f
0110
0d
11
e0
56
f3
57
a7
e4
00
da
0a
7a
1f
fd
aa
16
0120
39
6c
b4
c3
c3
1d
7c
1d
33
50
b9
15
a4
7b
1d
5b
0130
61
fb
19
f2
04
31
17
da
eb
e9
b7
82
cd
ef
cc
2a
0140
ad
d8
58
c9
8d
11
75
f7
98
0b
78
85
e0
a4
f1
ce
0150
e1
66
9d
60
e8
c6
27
fe
b9
22
2f
0e
9a
19
76
c1
0160
8a
62
c1
cf
ad
28
d3
c1
7e
60
c5
ca
10
2c
31
8f
0170
fc
4e
46
83
3e
08
0a
b0
e7
c5
5d
1a
09
e6
ef
ba
0180
93
70
f0
48
e3
0a
34
3f
11
0d
8f
fd
93
b2
af
d1
0190
e3
bc
5a
c5
3c
09
ee
29
29
42
4d
59
a2
ea
c3
b5
01A0
36
41
e7
78
22
9b
4c
d4
31
91
18
33
b1
54
4c
8c
01B0
d9
d0
56
a2
ce
24
df
ec
c4
ae
48
95
83
0f
cc
c9
01C0
ca
97
cd
cd
ff
29
ed
e3
1f
b4
1e
d3
67
8e
90
b5
01D0
2d
27
51
69
e2
79
3e
b4
15
f5
97
50
40
eb
a0
3c
01E0
c2
3c
78
24
9a
6c
66
8b
62
98
86
df
1a
a2
7d
c1
01F0
fe
ed
cb
58
1f
5b
5b
d6
30
38
e3
20
5f
cf
23
86
0200
68
f8
56
e8
16
75
e7
bb
ae
81
cd
ff
f2
d4
44
81
0210
f2
95
79
ff
8b
c3
c5
a2
d3
e1
4e
9e
9b
df
d6
4a
0220
39
bb
b4
25
32
f4
e0
63
a3
65
9b
98
0b
15
4f
66
0230
4c
00
13
d6
98
71
98
c4
13
f8
3c
81
c6
e6
0b
19
0240
d3
75
64
f2
20
c2
9b
22
25
a7
b5
ae
ae
df
95
d8
0250
c9
26
a0
45
a0
51
64
0e
11
93
f7
7a
19
e0
7b
61
0260
5e
65
9c
95
58
87
70
93
81
1b
55
f7
3c
5e
4f
8d
0270
b3
2e
a5
07
9b
c7
e5
fe
4f
99
c0
d7
3f
d8
c8
b4
0280
af
44
05
cc
d2
2e
af
bb
8f
bc
a6
40
0c
df
2d
85
0290
72
a5
92
4f
f1
50
5e
4c
ff
d0
a2
55
9a
0c
e9
ab
02A0
22
0d
fa
ad
c6
39
e2
c5
46
1d
a4
45
1a
61
a0
9a
02B0
d5
48
c0
db
cb
96
0a
32
34
77
3f
1b
e1
68
10
3e
02C0
5d
1f
da
68
c4
cf
66
ef
5a
e0
da
cd
22
cd
b3
8a
02D0
ed
3f
60
4c
29
08
4d
37
8a
2d
07
04
6f
be
ad
51
02E0
51
3c
d4
1a
85
a7
ed
c8
cb
c9
ad
4b
fd
1c
1f
7f
02F0
a1
70
83
4e
7d
c8
6f
a9
5f
ea
2e
71
93
25
11
3d
0300
fc
a3
4f
08
c7
bc
0a
c9
3f
63
93
e2
db
d3
3a
1c
0310
45
5c
59
89
af
e5
b2
9f
92
77
6a
a9
4d
16
ec
7e
0320
9c
78
ca
8e
05
0e
9e
5f
f3
ef
00
9f
fe
9c
65
17
0330
42
9f
55
5e
ea
b4
72
a3
e0
2b
6b
4d
1e
35
57
d3
0340
07
3f
67
c2
0c
bb
70
4a
9a
a7
d9
ce
8d
5a
12
3d
0350
83
67
f1
49
1f
0a
5d
cf
6d
71
e3
35
97
7f
43
5a
0360
35
d1
07
c1
c0
7f
16
31
80
2b
46
62
1c
ca
ca
f4
0370
44
2d
e6
cc
7b
9e
dd
a9
b0
82
d9
a9
ba
60
68
05
0380
f9
9a
95
f2
7f
d3
06
dd
40
ff
28
6d
38
de
22
95
0390
bc
89
8d
52
a0
a8
0f
0f
8c
f1
c5
86
ad
e0
9d
7c
03A0
a4
6c
c2
08
11
4c
00
fe
0d
19
76
83
38
6e
e5
46
03B0
75
bb
6c
64
63
cf
55
f8
89
e1
94
d6
0d
30
31
62
03C0
f6
80
b8
c8
47
f7
84
d5
c1
85
e8
a7
ce
51
a6
4d
03D0
72
2c
6b
b7
0000
.
.
¶
²
ë
I
.
û
:
5
.
¼
.
.
.
z
0010
.
Ü
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
.
Ã
,
.
×
£
¬
{
x
.
>
¾
.
0030
]
.
F
N
^
b
.
.
.
.
Í
.
.
j
.
r
0040
.
Ì
,
ë
Ã
(
½
Ô
ß
Ç
ç
ó
s
ê
1
.
0050
s
Ö
.
0
À
A
n
x
.
è
×
Å
v
t
m
.
0060
.
.
]
¤
.
W
5
®
Â
.
Í
Z
.
.
.
'
0070
J
]
È
.
:
±
C
#
ö
Ô
½
¾
Ó
Ü
.
!
0080
¯
0
.
f
f
±
®
²
.
.
µ
{
.
,
.
{
0090
.
.
.
r
y
.
ÿ
â
s
K
.
$
ñ
.
¶
§
00A0
ú
¯
.
×
i
[
*
.
Î
¥
.
Ã
'
¼
&
.
00B0
c
s
ú
ô
ï
Y
Ý
Ü
]
1
.
.
U
.
*
.
00C0
î
A
ú
.
õ
¦
.
.
=
?
ä
.
.
ê
¶
.
00D0
û
é
.
å
o
Ò
½
ò
.
¯
ß
(
¥
.
Û
¸
00E0
D
¢
î
³
Ø
.
*
.
¦
ó
.
ì
.
O
Ã
.
00F0
.
.
á
.
Æ
¸
(
)
d
ß
Ã
t
P
u
ç
M
0100
¿
¼
æ
Ô
N
.
À
©
è
¶
4
.
Ä
)
j
_
0110
.
.
à
V
ó
W
§
ä
.
Ú
.
z
.
ý
ª
.
0120
9
l
´
Ã
Ã
.
|
.
3
P
¹
.
¤
{
.
[
0130
a
û
.
ò
.
1
.
Ú
ë
é
·
.
Í
ï
Ì
*
0140
.
Ø
X
É
.
.
u
÷
.
.
x
.
à
¤
ñ
Î
0150
á
f
.
`
è
Æ
'
þ
¹
"
/
.
.
.
v
Á
0160
.
b
Á
Ï
.
(
Ó
Á
~
`
Å
Ê
.
,
1
.
0170
ü
N
F
.
>
.
.
°
ç
Å
]
.
.
æ
ï
º
0180
.
p
ð
H
ã
.
4
?
.
.
.
ý
.
²
¯
Ñ
0190
ã
¼
Z
Å
<
.
î
)
)
B
M
Y
¢
ê
Ã
µ
01A0
6
A
ç
x
"
.
L
Ô
1
.
.
3
±
T
L
.
01B0
Ù
Ð
V
¢
Î
$
ß
ì
Ä
®
H
.
.
.
Ì
É
01C0
Ê
.
Í
Í
ÿ
)
í
ã
.
´
.
Ó
g
.
.
µ
01D0
-
'
Q
i
â
y
>
´
.
õ
.
P
@
ë
.
<
01E0
Â
<
x
$
.
l
f
.
b
.
.
ß
.
¢
}
Á
01F0
þ
í
Ë
X
.
[
[
Ö
0
8
ã
_
Ï
#
.
0200
h
ø
V
è
.
u
ç
»
®
.
Í
ÿ
ò
Ô
D
.
0210
ò
.
y
ÿ
.
Ã
Å
¢
Ó
á
N
.
.
ß
Ö
J
0220
9
»
´
%
2
ô
à
c
£
e
.
.
.
.
O
f
0230
L
.
.
Ö
.
q
.
Ä
.
ø
<
.
Æ
æ
.
.
0240
Ó
u
d
ò
Â
.
"
%
§
µ
®
®
ß
.
Ø
0250
É
&
.
E
.
Q
d
.
.
.
÷
z
.
à
{
a
0260
^
e
.
.
X
.
p
.
.
.
U
÷
<
^
O
.
0270
³
.
¥
.
.
Ç
å
þ
O
.
À
×
?
Ø
È
´
0280
¯
D
.
Ì
Ò
.
¯
»
.
¼
¦
@
.
ß
-
.
0290
r
¥
.
O
ñ
P
^
L
ÿ
Ð
¢
U
.
.
é
«
02A0
"
.
ú
.
Æ
9
â
Å
F
.
¤
E
.
a
.
.
02B0
Õ
H
À
Û
Ë
.
.
2
4
w
?
.
á
h
.
>
02C0
]
.
Ú
h
Ä
Ï
f
ï
Z
à
Ú
Í
"
Í
³
.
02D0
í
?
`
L
)
.
M
7
.
-
.
.
o
¾
.
Q
02E0
Q
<
Ô
.
.
§
í
È
Ë
É
.
K
ý
.
.
.
02F0
¡
p
.
N
}
È
o
©
_
ê
.
q
.
%
.
=
0300
ü
£
O
.
Ç
¼
.
É
?
c
.
â
Û
Ó
:
.
0310
E
\
Y
.
¯
å
²
.
.
w
j
©
M
.
ì
~
0320
.
x
Ê
.
.
.
.
_
ó
ï
.
.
þ
.
e
.
0330
B
.
U
^
ê
´
r
£
à
+
k
M
.
5
W
Ó
0340
.
?
g
Â
.
»
p
J
.
§
Ù
Î
.
Z
.
=
0350
.
g
ñ
I
.
.
]
Ï
m
q
ã
5
.
.
C
Z
0360
5
Ñ
.
Á
À
.
.
1
.
+
F
b
.
Ê
Ê
ô
0370
D
-
æ
Ì
{
.
Ý
©
°
.
Ù
©
º
`
h
.
0380
ù
.
.
ò
.
Ó
.
Ý
@
ÿ
(
m
8
Þ
"
.
0390
¼
.
.
R
.
¨
.
.
.
ñ
Å
.
.
à
.
|
03A0
¤
l
Â
.
.
L
.
þ
.
.
v
.
8
n
å
F
03B0
u
»
l
d
c
Ï
U
ø
.
á
.
Ö
.
0
1
b
03C0
ö
.
¸
È
G
÷
.
Õ
Á
.
è
§
Î
Q
¦
M
03D0
r
,
k
·
- Transmission Control Protocol, Src Port: 22, Dst Port: 46770, Seq: 1774, Ack: 2074, Len: 948
- Source Port: 22
- Destination Port: 46770
- TCP Segment Len: 948
- Sequence number: 1774 (relative sequence number)
- Acknowledgment number: 2074 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1402
- Calculated window size: 179456
- Window size scaling factor: 128
- Checksum: 0x03dc [unverified]
- Urgent pointer: 0
- TCP payload (948 bytes)
- SSH Protocol
- SSH Version 2 (encryption:aes128-gcm@openssh.com mac: compression:none)
- Packet Length: 928
- Encrypted Packet: c32c91d7a3ac7b78803ebe915d08464e5e62101d8c8ecd92...
- MAC: 47f784d5c185e8a7ce51a64d722c6bb7
0000
b6
b2
00
16
3a
35
8d
bc
eb
49
9b
af
80
00
01
88
0010
00
28
00
00
0000
¶
²
.
.
:
5
.
¼
ë
I
.
¯
.
.
.
.
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 2074, Ack: 2722, Len: 0
- Source Port: 46770
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 2074 (relative sequence number)
- Acknowledgment number: 2722 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 392
- Calculated window size: 50176
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
b6
b2
eb
49
9b
af
3a
35
8d
bc
80
00
05
7a
0010
00
5c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
00
20
32
fc
26
6f
14
e8
c7
65
cd
79
46
4c
0030
70
44
ba
cc
36
c9
33
69
fb
56
9e
53
a2
f1
81
4c
0040
a3
a2
85
f2
33
28
28
77
bd
fa
92
0a
c0
f1
35
5d
0050
13
e0
3d
9f
0000
.
.
¶
²
ë
I
.
¯
:
5
.
¼
.
.
.
z
0010
.
\
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
2
ü
&
o
.
è
Ç
e
Í
y
F
L
0030
p
D
º
Ì
6
É
3
i
û
V
.
S
¢
ñ
.
L
0040
£
¢
.
ò
3
(
(
w
½
ú
.
.
À
ñ
5
]
0050
.
à
=
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46770, Seq: 2722, Ack: 2074, Len: 52
- Source Port: 22
- Destination Port: 46770
- TCP Segment Len: 52
- Sequence number: 2722 (relative sequence number)
- Acknowledgment number: 2074 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1402
- Calculated window size: 179456
- Window size scaling factor: 128
- Checksum: 0x005c [unverified]
- Urgent pointer: 0
- TCP payload (52 bytes)
- SSH Protocol
- SSH Version 2 (encryption:aes128-gcm@openssh.com mac: compression:none)
- Packet Length: 32
- Encrypted Packet: 32fc266f14e8c765cd79464c7044bacc36c93369fb569e53...
- MAC: 33282877bdfa920ac0f1355d13e03d9f
0000
b6
b2
00
16
3a
35
8d
bc
eb
49
9b
e3
80
00
01
88
0010
00
28
00
00
0000
¶
²
.
.
:
5
.
¼
ë
I
.
ã
.
.
.
.
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 2074, Ack: 2774, Len: 0
- Source Port: 46770
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 2074 (relative sequence number)
- Acknowledgment number: 2774 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 392
- Calculated window size: 50176
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
b6
b2
00
16
3a
35
8d
bc
eb
49
9b
e3
80
00
01
88
0010
04
98
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
01
50
fc
fe
9a
24
3e
39
5d
c2
34
c0
d4
79
0030
12
67
62
f6
dc
a3
00
f4
71
e5
46
7d
39
49
1e
07
0040
17
cc
37
fc
5e
8e
d7
b5
c0
99
f3
a4
63
79
f5
df
0050
1b
87
b5
4d
03
8a
81
14
3b
47
bf
d8
5e
1a
50
27
0060
54
be
15
ab
29
cc
da
10
d8
b1
36
25
e5
27
eb
83
0070
3a
c1
01
3e
ec
d9
55
f5
ab
09
eb
1c
19
bf
2d
19
0080
e5
c5
69
a7
74
39
5c
62
22
43
c5
64
c9
78
7e
58
0090
27
1f
38
3a
0b
12
c9
f8
72
78
b1
57
a5
17
ed
9b
00A0
e0
a6
21
47
69
a1
0c
0e
48
59
3c
66
ec
91
e6
bc
00B0
0b
6f
67
05
1c
3f
88
33
6a
d2
0f
07
a3
a9
7c
e5
00C0
b9
aa
c0
1f
b1
64
ae
6f
20
25
04
83
d9
9f
17
af
00D0
de
f8
58
96
0e
b7
57
27
b0
f1
60
cb
9d
c2
22
84
00E0
4e
e6
c8
5f
95
c1
ad
f4
4e
ef
d3
7a
7d
e0
c2
c6
00F0
c1
47
02
7c
b6
0c
f2
8d
db
f0
c5
3f
de
28
ac
c4
0100
ce
d2
b4
bb
88
07
97
e1
be
82
6a
62
64
37
6d
e3
0110
22
87
a8
f7
0e
c0
df
e4
8a
6e
ec
5d
28
5a
1e
5e
0120
d5
70
19
d1
ba
39
b9
fd
52
d5
f0
4c
19
0c
c0
5a
0130
62
1e
b3
d1
fe
8d
af
ee
05
59
1f
10
35
07
9c
89
0140
ca
76
cc
86
bf
ca
5f
19
ae
62
63
77
12
44
1d
14
0150
d7
40
cc
bf
31
df
41
8f
4d
f9
70
92
7e
5f
84
21
0160
fe
42
b2
1d
f8
87
37
c3
2d
dd
2f
f7
97
48
5e
87
0170
99
c5
3f
6d
08
68
ea
6d
4b
d7
ab
35
1a
47
25
db
0180
dc
2f
b8
a7
00
00
00
40
76
5e
16
ca
a7
0e
3e
1c
0190
0b
87
1b
08
ae
80
1e
d6
47
13
8c
e4
0f
90
fa
49
01A0
c8
54
2b
6c
34
f2
a7
12
1f
c5
f3
64
c1
66
d3
ea
01B0
b1
ff
57
65
50
30
8f
d0
21
fc
b8
e7
f6
80
ec
94
01C0
da
53
42
05
fe
89
7b
86
a1
df
de
e5
83
56
f3
46
01D0
cd
ce
4b
ce
52
85
17
90
00
00
00
30
1f
c6
76
9a
01E0
fb
24
29
19
c5
c0
5f
9c
a5
dd
c3
55
3d
76
c9
eb
01F0
a9
35
d1
a4
f7
ca
4a
a5
02
0d
f0
c8
5f
87
47
a1
0200
7b
9e
61
5a
0a
f5
cd
e5
89
a6
99
1a
be
f0
dd
41
0210
c6
b8
a9
0a
a1
a8
be
e1
83
fa
5d
ac
00
00
00
30
0220
c1
9d
fa
57
f6
85
e5
e6
dd
df
ba
12
c4
d7
b0
43
0230
5b
de
b8
fe
0e
ee
4b
c0
81
a4
62
03
22
66
69
ba
0240
fc
23
d3
42
d0
d6
2b
ae
72
c9
66
7c
00
87
3f
a5
0250
01
9a
53
f3
aa
b9
7e
6f
f2
ef
6f
a2
ea
be
79
ea
0260
00
00
00
30
a0
6b
61
01
c8
ef
40
65
66
6c
cb
27
0270
13
ae
81
63
16
ea
d1
77
51
f6
e5
62
5c
5f
3c
47
0280
ad
d9
4b
db
41
62
aa
eb
3b
3c
4e
e4
be
67
86
98
0290
58
65
5c
86
f0
2b
02
f7
27
4c
b5
09
bf
a5
51
24
02A0
ec
b1
f5
46
00
00
00
30
2a
1d
a9
db
26
2d
88
35
02B0
6b
b8
a3
08
7e
af
10
f8
7b
40
5e
27
a1
e0
70
49
02C0
24
88
7c
28
ad
26
e5
de
d5
ac
6c
be
e7
87
a2
96
02D0
e4
69
19
11
d6
dd
60
ce
ed
10
29
27
3f
67
3b
4a
02E0
c7
6b
43
14
2c
51
b5
dc
00
00
00
30
3e
40
4a
ae
02F0
96
e7
3f
97
4a
03
da
11
0a
0f
73
d3
5a
be
02
02
0300
0b
a8
86
b0
8b
2e
58
03
de
1c
08
67
f8
9e
c5
88
0310
52
24
9e
9f
62
10
12
9d
11
44
28
b2
b2
29
b4
fb
0320
5a
e8
a2
23
15
e9
72
02
bb
fe
aa
26
00
00
00
30
0330
db
46
d6
bb
00
a7
37
fd
41
ba
14
ac
2d
78
ac
a8
0340
31
4f
6e
7e
33
fd
17
2a
c1
85
6c
9a
d1
89
7c
73
0350
6c
61
1e
ee
22
0d
d2
08
cd
b5
7b
f9
50
2e
76
6c
0360
95
bb
13
96
d0
ef
c3
0b
a2
3a
a9
02
e4
14
9e
bb
0370
00
00
00
40
41
c3
13
e9
91
50
32
9c
23
10
20
a1
0380
18
1c
63
56
76
87
ec
12
27
94
b7
f2
18
22
9a
32
0390
19
c4
1f
84
a8
7f
60
67
a6
2d
90
d8
e5
17
4a
1e
03A0
44
04
45
31
25
a9
c2
d4
f5
72
eb
d2
00
9f
2d
bf
03B0
2f
95
4f
9b
1e
54
00
2a
4c
62
57
ed
0d
c5
2a
ad
03C0
d6
d2
c7
7b
00
00
00
40
07
21
8a
b2
a7
bd
a0
cd
03D0
2f
86
e0
f3
68
0b
cf
30
8f
a0
39
03
0b
29
40
54
03E0
83
b0
44
9e
ef
bc
fc
be
43
16
ea
a5
14
ce
e6
9c
03F0
48
1b
97
65
10
31
0f
8b
f9
e4
80
01
6a
26
36
bf
0400
3f
1d
7b
52
48
81
7d
51
d2
3d
12
4e
75
b9
b6
54
0410
8c
7e
51
0a
72
10
77
7f
00
00
00
30
89
92
a2
2f
0420
36
e2
3f
37
5f
64
03
0c
c6
9d
c0
53
0c
3a
1e
97
0430
53
30
c7
45
5d
0b
b6
c9
68
7b
60
c8
24
92
73
59
0440
28
9d
0a
47
65
46
8a
cf
a2
63
c3
e8
8e
d5
4b
29
0450
89
af
10
7c
ee
f0
6d
4a
8b
2c
a4
da
00
00
00
20
0460
52
ed
a5
fb
6f
6a
60
f9
f8
29
8d
0f
34
15
4b
e2
0470
58
c6
57
8b
30
fa
09
28
3e
29
46
bb
28
b2
8a
f6
0480
30
20
f4
43
62
af
80
ef
48
b9
9f
67
6c
f6
96
b5
0000
¶
²
.
.
:
5
.
¼
ë
I
.
ã
.
.
.
.
0010
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
P
ü
þ
.
$
>
9
]
Â
4
À
Ô
y
0030
.
g
b
ö
Ü
£
.
ô
q
å
F
}
9
I
.
.
0040
.
Ì
7
ü
^
.
×
µ
À
.
ó
¤
c
y
õ
ß
0050
.
.
µ
M
.
.
.
.
;
G
¿
Ø
^
.
P
'
0060
T
¾
.
«
)
Ì
Ú
.
Ø
±
6
%
å
'
ë
.
0070
:
Á
.
>
ì
Ù
U
õ
«
.
ë
.
.
¿
-
.
0080
å
Å
i
§
t
9
\
b
"
C
Å
d
É
x
~
X
0090
'
.
8
:
.
.
É
ø
r
x
±
W
¥
.
í
.
00A0
à
¦
!
G
i
¡
.
.
H
Y
<
f
ì
.
æ
¼
00B0
.
o
g
.
.
?
.
3
j
Ò
.
.
£
©
|
å
00C0
¹
ª
À
.
±
d
®
o
%
.
.
Ù
.
.
¯
00D0
Þ
ø
X
.
.
·
W
'
°
ñ
`
Ë
.
Â
"
.
00E0
N
æ
È
_
.
Á
.
ô
N
ï
Ó
z
}
à
Â
Æ
00F0
Á
G
.
|
¶
.
ò
.
Û
ð
Å
?
Þ
(
¬
Ä
0100
Î
Ò
´
»
.
.
.
á
¾
.
j
b
d
7
m
ã
0110
"
.
¨
÷
.
À
ß
ä
.
n
ì
]
(
Z
.
^
0120
Õ
p
.
Ñ
º
9
¹
ý
R
Õ
ð
L
.
.
À
Z
0130
b
.
³
Ñ
þ
.
¯
î
.
Y
.
.
5
.
.
.
0140
Ê
v
Ì
.
¿
Ê
_
.
®
b
c
w
.
D
.
.
0150
×
@
Ì
¿
1
ß
A
.
M
ù
p
.
~
_
.
!
0160
þ
B
²
.
ø
.
7
Ã
-
Ý
/
÷
.
H
^
.
0170
.
Å
?
m
.
h
ê
m
K
×
«
5
.
G
%
Û
0180
Ü
/
¸
§
.
.
.
@
v
^
.
Ê
§
.
>
.
0190
.
.
.
.
®
.
.
Ö
G
.
.
ä
.
.
ú
I
01A0
È
T
+
l
4
ò
§
.
.
Å
ó
d
Á
f
Ó
ê
01B0
±
ÿ
W
e
P
0
.
Ð
!
ü
¸
ç
ö
.
ì
.
01C0
Ú
S
B
.
þ
.
{
.
¡
ß
Þ
å
.
V
ó
F
01D0
Í
Î
K
Î
R
.
.
.
.
.
.
0
.
Æ
v
.
01E0
û
$
)
.
Å
À
_
.
¥
Ý
Ã
U
=
v
É
ë
01F0
©
5
Ñ
¤
÷
Ê
J
¥
.
.
ð
È
_
.
G
¡
0200
{
.
a
Z
.
õ
Í
å
.
¦
.
.
¾
ð
Ý
A
0210
Æ
¸
©
.
¡
¨
¾
á
.
ú
]
¬
.
.
.
0
0220
Á
.
ú
W
ö
.
å
æ
Ý
ß
º
.
Ä
×
°
C
0230
[
Þ
¸
þ
.
î
K
À
.
¤
b
.
"
f
i
º
0240
ü
#
Ó
B
Ð
Ö
+
®
r
É
f
|
.
.
?
¥
0250
.
.
S
ó
ª
¹
~
o
ò
ï
o
¢
ê
¾
y
ê
0260
.
.
.
0
.
k
a
.
È
ï
@
e
f
l
Ë
'
0270
.
®
.
c
.
ê
Ñ
w
Q
ö
å
b
\
_
<
G
0280
.
Ù
K
Û
A
b
ª
ë
;
<
N
ä
¾
g
.
.
0290
X
e
\
.
ð
+
.
÷
'
L
µ
.
¿
¥
Q
$
02A0
ì
±
õ
F
.
.
.
0
*
.
©
Û
&
-
.
5
02B0
k
¸
£
.
~
¯
.
ø
{
@
^
'
¡
à
p
I
02C0
$
.
|
(
.
&
å
Þ
Õ
¬
l
¾
ç
.
¢
.
02D0
ä
i
.
.
Ö
Ý
`
Î
í
.
)
'
?
g
;
J
02E0
Ç
k
C
.
,
Q
µ
Ü
.
.
.
0
>
@
J
®
02F0
.
ç
?
.
J
.
Ú
.
.
.
s
Ó
Z
¾
.
.
0300
.
¨
.
°
.
.
X
.
Þ
.
.
g
ø
.
Å
.
0310
R
$
.
.
b
.
.
.
.
D
(
²
²
)
´
û
0320
Z
è
¢
#
.
é
r
.
»
þ
ª
&
.
.
.
0
0330
Û
F
Ö
»
.
§
7
ý
A
º
.
¬
-
x
¬
¨
0340
1
O
n
~
3
ý
.
*
Á
.
l
.
Ñ
.
|
s
0350
l
a
.
î
"
.
Ò
.
Í
µ
{
ù
P
.
v
l
0360
.
»
.
.
Ð
ï
Ã
.
¢
:
©
.
ä
.
.
»
0370
.
.
.
@
A
Ã
.
é
.
P
2
.
#
.
¡
0380
.
.
c
V
v
.
ì
.
'
.
·
ò
.
"
.
2
0390
.
Ä
.
.
¨
.
`
g
¦
-
.
Ø
å
.
J
.
03A0
D
.
E
1
%
©
Â
Ô
õ
r
ë
Ò
.
.
-
¿
03B0
/
.
O
.
.
T
.
*
L
b
W
í
.
Å
*
.
03C0
Ö
Ò
Ç
{
.
.
.
@
.
!
.
²
§
½
.
Í
03D0
/
.
à
ó
h
.
Ï
0
.
.
9
.
.
)
@
T
03E0
.
°
D
.
ï
¼
ü
¾
C
.
ê
¥
.
Î
æ
.
03F0
H
.
.
e
.
1
.
.
ù
ä
.
.
j
&
6
¿
0400
?
.
{
R
H
.
}
Q
Ò
=
.
N
u
¹
¶
T
0410
.
~
Q
.
r
.
w
.
.
.
.
0
.
.
¢
/
0420
6
â
?
7
_
d
.
.
Æ
.
À
S
.
:
.
.
0430
S
0
Ç
E
]
.
¶
É
h
{
`
È
$
.
s
Y
0440
(
.
.
G
e
F
.
Ï
¢
c
Ã
è
.
Õ
K
)
0450
.
¯
.
|
î
ð
m
J
.
,
¤
Ú
.
.
.
0460
R
í
¥
û
o
j
`
ù
ø
)
.
.
4
.
K
â
0470
X
Æ
W
.
0
ú
.
(
>
)
F
»
(
²
.
ö
0480
0
ô
C
b
¯
.
ï
H
¹
.
g
l
ö
.
µ
- Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 2074, Ack: 2774, Len: 1136
- Source Port: 46770
- Destination Port: 22
- TCP Segment Len: 1136
- Sequence number: 2074 (relative sequence number)
- Acknowledgment number: 2774 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 392
- Calculated window size: 50176
- Window size scaling factor: 128
- Checksum: 0x0498 [unverified]
- Urgent pointer: 0
- TCP payload (1136 bytes)
- SSH Protocol
- SSH Version 2 (encryption:aes128-gcm@openssh.com mac: compression:none)
- Packet Length: 336
- Encrypted Packet: fcfe9a243e395dc234c0d479126762f6dca300f471e5467d...
- MAC: 3020f44362af80ef48b99f676cf696b5
0000
00
16
b6
b2
eb
49
9b
e3
3a
35
92
2c
80
00
05
8d
0010
00
28
00
00
0000
.
.
¶
²
ë
I
.
ã
:
5
.
,
.
.
.
.
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46770, Seq: 2774, Ack: 3210, Len: 0
- Source Port: 22
- Destination Port: 46770
- TCP Segment Len: 0
- Sequence number: 2774 (relative sequence number)
- Acknowledgment number: 3210 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1421
- Calculated window size: 181888
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
b6
b2
eb
49
9b
e3
3a
35
92
2c
80
00
05
8d
0010
00
94
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
00
10
89
43
f5
d4
7f
b0
28
49
ce
a9
ab
04
0030
ce
91
c9
38
7c
52
aa
ee
a4
73
2f
08
70
c8
cb
60
0040
26
38
cb
4d
00
00
00
10
05
ac
46
15
67
c1
38
d3
0050
a6
b1
9c
c5
24
64
7f
d1
7f
28
c4
7c
55
ce
c0
1b
0060
d4
df
b2
32
33
43
64
82
00
00
00
10
bb
83
bc
9e
0070
c4
d1
99
5e
a7
af
d5
08
fb
dd
17
40
73
c4
4a
cb
0080
00
bb
0b
b3
02
b0
27
fe
b6
bc
f0
9c
0000
.
.
¶
²
ë
I
.
ã
:
5
.
,
.
.
.
.
0010
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
.
.
C
õ
Ô
.
°
(
I
Î
©
«
.
0030
Î
.
É
8
|
R
ª
î
¤
s
/
.
p
È
Ë
`
0040
&
8
Ë
M
.
.
.
.
.
¬
F
.
g
Á
8
Ó
0050
¦
±
.
Å
$
d
.
Ñ
.
(
Ä
|
U
Î
À
.
0060
Ô
ß
²
2
3
C
d
.
.
.
.
.
»
.
¼
.
0070
Ä
Ñ
.
^
§
¯
Õ
.
û
Ý
.
@
s
Ä
J
Ë
0080
.
»
.
³
.
°
'
þ
¶
¼
ð
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46770, Seq: 2774, Ack: 3210, Len: 108
- Source Port: 22
- Destination Port: 46770
- TCP Segment Len: 108
- Sequence number: 2774 (relative sequence number)
- Acknowledgment number: 3210 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1421
- Calculated window size: 181888
- Window size scaling factor: 128
- Checksum: 0x0094 [unverified]
- Urgent pointer: 0
- TCP payload (108 bytes)
- SSH Protocol
- SSH Version 2 (encryption:aes128-gcm@openssh.com mac: compression:none)
- Packet Length: 16
- Encrypted Packet: 8943f5d47fb02849cea9ab04ce91c9387c52aaeea4732f08...
- MAC: 73c44acb00bb0bb302b027feb6bcf09c
0000
00
16
b6
b2
eb
49
9c
4f
3a
35
92
2c
80
00
05
8d
0010
02
7c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
02
40
7d
53
01
ea
64
7f
54
e0
c6
3c
53
d7
0030
4b
26
1e
39
0e
b1
3a
2c
41
a2
d0
6f
e1
06
f3
2c
0040
cd
d2
69
0c
06
2d
5d
46
26
59
f8
20
ee
21
3a
1c
0050
1b
1f
26
e3
cb
70
eb
a2
9c
a2
05
39
a6
a3
4b
55
0060
22
09
6a
41
e5
b9
62
2d
97
40
12
a8
bd
c1
98
e9
0070
e4
8d
37
af
4c
b0
87
d5
77
c4
ef
81
54
d3
bf
7a
0080
96
1e
a8
97
ee
d1
f4
82
fd
3f
0c
54
52
cc
70
6f
0090
e7
16
bb
e9
16
4e
48
e9
72
7b
4c
ef
6f
63
16
db
00A0
e0
3e
d4
9e
0c
7d
4c
da
f4
2a
b7
1f
5b
4d
e2
05
00B0
02
e8
70
d3
78
28
75
52
4f
36
63
73
f4
ba
7c
f2
00C0
a8
d1
09
8c
d7
0d
44
eb
9d
a1
45
e8
2b
c9
47
df
00D0
d3
09
de
f9
d2
04
e7
80
1b
05
f4
51
20
0c
b5
17
00E0
44
a0
89
b4
6e
cc
23
12
3e
2b
dd
7d
47
c5
77
f4
00F0
33
47
1e
68
05
95
31
27
42
80
66
20
32
21
06
29
0100
e3
47
97
7b
8a
4d
d7
ca
99
34
21
aa
85
88
02
39
0110
79
21
84
30
77
ab
49
f5
1d
5e
f1
16
e0
65
67
b2
0120
22
21
ea
30
79
72
7b
86
b6
8f
03
54
85
a7
cd
a0
0130
6a
49
3f
16
11
bc
ad
9c
df
a1
5d
59
19
0a
72
ce
0140
77
b5
c8
84
07
fa
31
8b
31
c6
8d
b4
40
7b
a8
cb
0150
d7
a2
9e
d9
f0
c9
e5
ea
2c
e2
ba
ef
48
20
d5
52
0160
5e
cb
36
1e
f1
88
c7
b3
c3
e9
fb
3f
8f
a3
75
39
0170
62
92
84
f9
1f
39
3c
4a
a6
70
f1
ee
53
f6
26
92
0180
b1
6c
4f
7e
b0
3e
30
8d
a3
cc
61
34
16
d4
17
01
0190
7a
9d
8d
4c
84
b7
cc
5a
94
20
cd
d2
e3
1d
4d
ed
01A0
17
cb
a7
63
23
33
05
98
00
d1
7f
04
25
04
53
ca
01B0
cc
ff
ba
00
ae
d6
20
4e
96
1e
ce
c9
56
55
bc
be
01C0
4e
ff
bf
1c
9d
19
10
e0
d9
7d
c0
64
2f
b6
9d
8e
01D0
25
6c
98
21
b2
d7
40
2e
a4
11
da
f0
f5
14
bf
d6
01E0
97
20
dc
0c
d2
01
0a
c6
ff
82
7f
cb
27
33
38
91
01F0
32
a1
46
6e
41
54
11
2f
eb
5b
02
79
30
cd
5f
b7
0200
15
7f
99
87
92
a7
39
20
84
b6
cb
24
ce
b2
fa
5f
0210
a3
31
bf
c5
e3
a1
43
48
40
fa
49
78
22
c7
b0
86
0220
54
67
48
08
fd
e5
09
d3
bd
42
62
3c
77
c6
22
f9
0230
c3
24
78
bc
81
e1
e2
f3
70
03
9c
a7
10
c9
20
f8
0240
cc
3d
65
a4
b9
ec
42
a3
4b
6c
0d
87
57
c6
f9
8a
0250
02
b6
70
69
b4
20
cb
f3
81
c8
f5
31
ed
8f
29
5f
0260
a3
c0
ab
ab
6f
bb
c3
2d
5f
97
cb
f7
1e
dd
7f
92
0270
fe
a1
07
b8
0000
.
.
¶
²
ë
I
.
O
:
5
.
,
.
.
.
.
0010
.
|
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
@
}
S
.
ê
d
.
T
à
Æ
<
S
×
0030
K
&
.
9
.
±
:
,
A
¢
Ð
o
á
.
ó
,
0040
Í
Ò
i
.
.
-
]
F
&
Y
ø
î
!
:
.
0050
.
.
&
ã
Ë
p
ë
¢
.
¢
.
9
¦
£
K
U
0060
"
.
j
A
å
¹
b
-
.
@
.
¨
½
Á
.
é
0070
ä
.
7
¯
L
°
.
Õ
w
Ä
ï
.
T
Ó
¿
z
0080
.
.
¨
.
î
Ñ
ô
.
ý
?
.
T
R
Ì
p
o
0090
ç
.
»
é
.
N
H
é
r
{
L
ï
o
c
.
Û
00A0
à
>
Ô
.
.
}
L
Ú
ô
*
·
.
[
M
â
.
00B0
.
è
p
Ó
x
(
u
R
O
6
c
s
ô
º
|
ò
00C0
¨
Ñ
.
.
×
.
D
ë
.
¡
E
è
+
É
G
ß
00D0
Ó
.
Þ
ù
Ò
.
ç
.
.
.
ô
Q
.
µ
.
00E0
D
.
.
´
n
Ì
#
.
>
+
Ý
}
G
Å
w
ô
00F0
3
G
.
h
.
.
1
'
B
.
f
2
!
.
)
0100
ã
G
.
{
.
M
×
Ê
.
4
!
ª
.
.
.
9
0110
y
!
.
0
w
«
I
õ
.
^
ñ
.
à
e
g
²
0120
"
!
ê
0
y
r
{
.
¶
.
.
T
.
§
Í
.
0130
j
I
?
.
.
¼
.
.
ß
¡
]
Y
.
.
r
Î
0140
w
µ
È
.
.
ú
1
.
1
Æ
.
´
@
{
¨
Ë
0150
×
¢
.
Ù
ð
É
å
ê
,
â
º
ï
H
Õ
R
0160
^
Ë
6
.
ñ
.
Ç
³
Ã
é
û
?
.
£
u
9
0170
b
.
.
ù
.
9
<
J
¦
p
ñ
î
S
ö
&
.
0180
±
l
O
~
°
>
0
.
£
Ì
a
4
.
Ô
.
.
0190
z
.
.
L
.
·
Ì
Z
.
Í
Ò
ã
.
M
í
01A0
.
Ë
§
c
#
3
.
.
.
Ñ
.
.
%
.
S
Ê
01B0
Ì
ÿ
º
.
®
Ö
N
.
.
Î
É
V
U
¼
¾
01C0
N
ÿ
¿
.
.
.
.
à
Ù
}
À
d
/
¶
.
.
01D0
%
l
.
!
²
×
@
.
¤
.
Ú
ð
õ
.
¿
Ö
01E0
.
Ü
.
Ò
.
.
Æ
ÿ
.
.
Ë
'
3
8
.
01F0
2
¡
F
n
A
T
.
/
ë
[
.
y
0
Í
_
·
0200
.
.
.
.
.
§
9
.
¶
Ë
$
Î
²
ú
_
0210
£
1
¿
Å
ã
¡
C
H
@
ú
I
x
"
Ç
°
.
0220
T
g
H
.
ý
å
.
Ó
½
B
b
<
w
Æ
"
ù
0230
Ã
$
x
¼
.
á
â
ó
p
.
.
§
.
É
ø
0240
Ì
=
e
¤
¹
ì
B
£
K
l
.
.
W
Æ
ù
.
0250
.
¶
p
i
´
Ë
ó
.
È
õ
1
í
.
)
_
0260
£
À
«
«
o
»
Ã
-
_
.
Ë
÷
.
Ý
.
.
0270
þ
¡
.
¸
- Transmission Control Protocol, Src Port: 22, Dst Port: 46770, Seq: 2882, Ack: 3210, Len: 596
- Source Port: 22
- Destination Port: 46770
- TCP Segment Len: 596
- Sequence number: 2882 (relative sequence number)
- Acknowledgment number: 3210 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1421
- Calculated window size: 181888
- Window size scaling factor: 128
- Checksum: 0x027c [unverified]
- Urgent pointer: 0
- TCP payload (596 bytes)
- SSH Protocol
- SSH Version 2 (encryption:aes128-gcm@openssh.com mac: compression:none)
- Packet Length: 576
- Encrypted Packet: 7d5301ea647f54e0c63c53d74b261e390eb13a2c41a2d06f...
- MAC: 6fbbc32d5f97cbf71edd7f92fea107b8
0000
b6
b2
00
16
3a
35
92
2c
eb
49
9e
a3
80
00
01
99
0010
00
28
00
00
0000
¶
²
.
.
:
5
.
,
ë
I
.
£
.
.
.
.
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 3210, Ack: 3478, Len: 0
- Source Port: 46770
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 3210 (relative sequence number)
- Acknowledgment number: 3478 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 409
- Calculated window size: 52352
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
b6
b2
eb
49
9e
a3
3a
35
92
2c
80
00
05
8d
0010
00
9c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
00
60
b5
00
5c
0e
85
25
ad
64
f5
fe
2f
74
0030
bb
6a
cc
0e
1b
69
57
97
f0
c6
40
4e
8c
ab
d3
a8
0040
70
69
9e
08
57
21
6d
4f
d8
b0
95
88
c1
46
20
06
0050
03
02
03
ef
9a
3a
22
60
77
54
38
2c
72
20
4e
49
0060
ff
4f
01
14
3b
b3
5c
86
d1
7a
c9
bb
09
2f
db
53
0070
d7
cc
05
22
c2
62
b6
d6
8b
e2
7f
26
3a
1a
ca
dd
0080
67
d2
8e
20
5d
35
2a
ab
3b
e4
6d
75
ad
d5
46
ff
0090
4e
71
31
9d
0000
.
.
¶
²
ë
I
.
£
:
5
.
,
.
.
.
.
0010
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
`
µ
.
\
.
.
%
.
d
õ
þ
/
t
0030
»
j
Ì
.
.
i
W
.
ð
Æ
@
N
.
«
Ó
¨
0040
p
i
.
.
W
!
m
O
Ø
°
.
.
Á
F
.
0050
.
.
.
ï
.
:
"
`
w
T
8
,
r
N
I
0060
ÿ
O
.
.
;
³
\
.
Ñ
z
É
»
.
/
Û
S
0070
×
Ì
.
"
Â
b
¶
Ö
.
â
.
&
:
.
Ê
Ý
0080
g
Ò
.
]
5
*
«
;
ä
m
u
.
Õ
F
ÿ
0090
N
q
1
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46770, Seq: 3478, Ack: 3210, Len: 116
- Source Port: 22
- Destination Port: 46770
- TCP Segment Len: 116
- Sequence number: 3478 (relative sequence number)
- Acknowledgment number: 3210 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1421
- Calculated window size: 181888
- Window size scaling factor: 128
- Checksum: 0x009c [unverified]
- Urgent pointer: 0
- TCP payload (116 bytes)
- SSH Protocol
- SSH Version 2 (encryption:aes128-gcm@openssh.com mac: compression:none)
- Packet Length: 96
- Encrypted Packet: b5005c0e8525ad64f5fe2f74bb6acc0e1b695797f0c6404e...
- MAC: 5d352aab3be46d75add546ff4e71319d
0000
b6
b2
00
16
3a
35
92
2c
eb
49
9f
17
80
00
01
99
0010
00
28
00
00
0000
¶
²
.
.
:
5
.
,
ë
I
.
.
.
.
.
.
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46770, Dst Port: 22, Seq: 3210, Ack: 3594, Len: 0
- Source Port: 46770
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 3210 (relative sequence number)
- Acknowledgment number: 3594 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 409
- Calculated window size: 52352
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0