The attached packet trace was collected on a Linux server. In the ssh protocol, the client and the server can request that data be compressed before encryption. This can be useful to speedup transfers in low speed networks. To negotiate the compression scheme, the client and the servers propose an ordered list in the KeyExchangeInit message.
# |
Taille |
Résumé |
État |
0 |
20 octets |
Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 0, Len: 0 |
|
1 |
20 octets |
Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 0, Ack: 1, Len: 0 |
|
2 |
20 octets |
Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 1, Ack: 1, Len: 0 |
|
3 |
73 octets |
SSH Protocol |
|
4 |
20 octets |
Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 1, Ack: 42, Len: 0 |
|
5 |
73 octets |
SSH Protocol |
|
6 |
20 octets |
Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 42, Ack: 42, Len: 0 |
|
7 |
1112 octets |
SSH Protocol |
|
8 |
20 octets |
Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 42, Ack: 1122, Len: 0 |
|
9 |
1392 octets |
SSH Protocol |
|
10 |
20 octets |
Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 1122, Ack: 1402, Len: 0 |
|
11 |
80 octets |
SSH Protocol |
|
12 |
20 octets |
Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 1122, Ack: 1450, Len: 0 |
|
13 |
484 octets |
SSH Protocol |
|
14 |
48 octets |
SSH Protocol |
|
15 |
20 octets |
Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 1574, Ack: 1466, Len: 0 |
|
16 |
76 octets |
SSH Protocol |
|
17 |
20 octets |
Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 1574, Ack: 1510, Len: 0 |
|
18 |
76 octets |
SSH Protocol |
|
19 |
92 octets |
SSH Protocol |
|
20 |
84 octets |
SSH Protocol |
|
21 |
404 octets |
SSH Protocol |
|
22 |
84 octets |
SSH Protocol |
|
23 |
20 octets |
Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 1942, Ack: 1722, Len: 0 |
|
24 |
180 octets |
SSH Protocol |
|
25 |
60 octets |
SSH Protocol |
|
26 |
20 octets |
Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 2090, Ack: 1750, Len: 0 |
|
27 |
144 octets |
SSH Protocol |
|
28 |
20 octets |
Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 1750, Ack: 2202, Len: 0 |
|
29 |
980 octets |
SSH Protocol |
|
30 |
20 octets |
Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 2202, Ack: 2698, Len: 0 |
|
31 |
68 octets |
SSH Protocol |
|
32 |
20 octets |
Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 2202, Ack: 2734, Len: 0 |
|
33 |
744 octets |
SSH Protocol |
|
34 |
20 octets |
Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 2734, Ack: 2914, Len: 0 |
|
35 |
140 octets |
SSH Protocol |
|
36 |
228 octets |
SSH Protocol |
|
37 |
20 octets |
Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 2914, Ack: 3038, Len: 0 |
|
38 |
292 octets |
SSH Protocol |
|
39 |
20 octets |
Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 2914, Ack: 3298, Len: 0 |
|
40 |
116 octets |
SSH Protocol |
|
41 |
20 octets |
Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 2914, Ack: 3382, Len: 0 |
|
42 |
68 octets |
SSH Protocol |
|
43 |
68 octets |
SSH Protocol |
|
44 |
20 octets |
Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 2950, Ack: 3418, Len: 0 |
|
45 |
68 octets |
SSH Protocol |
|
46 |
68 octets |
SSH Protocol |
|
47 |
20 octets |
Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 2986, Ack: 3454, Len: 0 |
|
48 |
68 octets |
SSH Protocol |
|
49 |
68 octets |
SSH Protocol |
|
50 |
20 octets |
Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 3022, Ack: 3490, Len: 0 |
|
51 |
68 octets |
SSH Protocol |
|
52 |
68 octets |
SSH Protocol |
|
53 |
20 octets |
Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 3058, Ack: 3526, Len: 0 |
|
54 |
68 octets |
SSH Protocol |
|
55 |
68 octets |
SSH Protocol |
|
56 |
20 octets |
Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 3094, Ack: 3562, Len: 0 |
|
57 |
76 octets |
SSH Protocol |
|
58 |
20 octets |
Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 3094, Ack: 3606, Len: 0 |
|
59 |
184 octets |
SSH Protocol |
|
60 |
20 octets |
Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 3094, Ack: 3758, Len: 0 |
|
61 |
68 octets |
SSH Protocol |
|
62 |
92 octets |
SSH Protocol |
|
63 |
20 octets |
Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 3190, Ack: 3758, Len: 0 |
|
64 |
20 octets |
Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 3758, Ack: 3191, Len: 0 |
|
65 |
20 octets |
Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 3758, Ack: 3191, Len: 0 |
|
66 |
20 octets |
Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 3191, Ack: 3759, Len: 0 |
|
0000
b6
6e
00
16
52
a3
a7
a6
00
00
00
00
a0
00
aa
aa
0010
00
30
00
00
0000
¶
n
.
.
R
£
§
¦
.
.
.
.
.
.
ª
ª
0010
.
0
.
.
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 0, Len: 0
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 0 (relative sequence number)
- Acknowledgment number: 0
- 1010 .... = Header Length: 40 bytes (10)
- Window size value: 43690
- Calculated window size: 43690
- Checksum: 0x0030 [unverified]
- Urgent pointer: 0
0000
00
16
b6
6e
d4
7f
d8
6c
52
a3
a7
a7
a0
00
aa
aa
0010
00
30
00
00
0000
.
.
¶
n
Ô
.
Ø
l
R
£
§
§
.
.
ª
ª
0010
.
0
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 0, Ack: 1, Len: 0
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 0
- Sequence number: 0 (relative sequence number)
- Acknowledgment number: 1 (relative ack number)
- 1010 .... = Header Length: 40 bytes (10)
- Window size value: 43690
- Calculated window size: 43690
- Checksum: 0x0030 [unverified]
- Urgent pointer: 0
0000
b6
6e
00
16
52
a3
a7
a7
d4
7f
d8
6d
80
00
01
56
0010
00
28
00
00
0000
¶
n
.
.
R
£
§
§
Ô
.
Ø
m
.
.
.
V
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 1, Ack: 1, Len: 0
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 1 (relative sequence number)
- Acknowledgment number: 1 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 342
- Calculated window size: 43776
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
b6
6e
00
16
52
a3
a7
a7
d4
7f
d8
6d
80
00
01
56
0010
00
51
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
53
53
48
2d
32
2e
30
2d
4f
70
65
6e
53
53
48
5f
0030
37
2e
36
70
31
20
55
62
75
6e
74
75
2d
34
75
62
0040
75
6e
74
75
30
2e
33
0d
0a
0000
¶
n
.
.
R
£
§
§
Ô
.
Ø
m
.
.
.
V
0010
.
Q
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
S
S
H
-
2
.
0
-
O
p
e
n
S
S
H
_
0030
7
.
6
p
1
U
b
u
n
t
u
-
4
u
b
0040
u
n
t
u
0
.
3
.
.
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 1, Ack: 1, Len: 41
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 41
- Sequence number: 1 (relative sequence number)
- Acknowledgment number: 1 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 342
- Calculated window size: 43776
- Window size scaling factor: 128
- Checksum: 0x0051 [unverified]
- Urgent pointer: 0
- TCP payload (41 bytes)
- SSH Protocol
- Protocol: SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3
0000
00
16
b6
6e
d4
7f
d8
6d
52
a3
a7
d0
80
00
01
56
0010
00
28
00
00
0000
.
.
¶
n
Ô
.
Ø
m
R
£
§
Ð
.
.
.
V
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 1, Ack: 42, Len: 0
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 0
- Sequence number: 1 (relative sequence number)
- Acknowledgment number: 42 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 342
- Calculated window size: 43776
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
b6
6e
d4
7f
d8
6d
52
a3
a7
d0
80
00
01
56
0010
00
51
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
53
53
48
2d
32
2e
30
2d
4f
70
65
6e
53
53
48
5f
0030
37
2e
36
70
31
20
55
62
75
6e
74
75
2d
34
75
62
0040
75
6e
74
75
30
2e
33
0d
0a
0000
.
.
¶
n
Ô
.
Ø
m
R
£
§
Ð
.
.
.
V
0010
.
Q
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
S
S
H
-
2
.
0
-
O
p
e
n
S
S
H
_
0030
7
.
6
p
1
U
b
u
n
t
u
-
4
u
b
0040
u
n
t
u
0
.
3
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 1, Ack: 42, Len: 41
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 41
- Sequence number: 1 (relative sequence number)
- Acknowledgment number: 42 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 342
- Calculated window size: 43776
- Window size scaling factor: 128
- Checksum: 0x0051 [unverified]
- Urgent pointer: 0
- TCP payload (41 bytes)
- SSH Protocol
- Protocol: SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3
0000
b6
6e
00
16
52
a3
a7
d0
d4
7f
d8
96
80
00
01
56
0010
00
28
00
00
0000
¶
n
.
.
R
£
§
Ð
Ô
.
Ø
.
.
.
.
V
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 42, Ack: 42, Len: 0
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 42 (relative sequence number)
- Acknowledgment number: 42 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 342
- Calculated window size: 43776
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
b6
6e
d4
7f
d8
96
52
a3
a7
d0
80
00
01
56
0010
04
60
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
04
34
06
14
51
1b
7d
0c
bd
18
2a
59
e8
12
0030
52
b2
4b
54
af
1f
00
00
01
02
63
75
72
76
65
32
0040
35
35
31
39
2d
73
68
61
32
35
36
2c
63
75
72
76
0050
65
32
35
35
31
39
2d
73
68
61
32
35
36
40
6c
69
0060
62
73
73
68
2e
6f
72
67
2c
65
63
64
68
2d
73
68
0070
61
32
2d
6e
69
73
74
70
32
35
36
2c
65
63
64
68
0080
2d
73
68
61
32
2d
6e
69
73
74
70
33
38
34
2c
65
0090
63
64
68
2d
73
68
61
32
2d
6e
69
73
74
70
35
32
00A0
31
2c
64
69
66
66
69
65
2d
68
65
6c
6c
6d
61
6e
00B0
2d
67
72
6f
75
70
2d
65
78
63
68
61
6e
67
65
2d
00C0
73
68
61
32
35
36
2c
64
69
66
66
69
65
2d
68
65
00D0
6c
6c
6d
61
6e
2d
67
72
6f
75
70
31
36
2d
73
68
00E0
61
35
31
32
2c
64
69
66
66
69
65
2d
68
65
6c
6c
00F0
6d
61
6e
2d
67
72
6f
75
70
31
38
2d
73
68
61
35
0100
31
32
2c
64
69
66
66
69
65
2d
68
65
6c
6c
6d
61
0110
6e
2d
67
72
6f
75
70
31
34
2d
73
68
61
32
35
36
0120
2c
64
69
66
66
69
65
2d
68
65
6c
6c
6d
61
6e
2d
0130
67
72
6f
75
70
31
34
2d
73
68
61
31
00
00
00
41
0140
73
73
68
2d
72
73
61
2c
72
73
61
2d
73
68
61
32
0150
2d
35
31
32
2c
72
73
61
2d
73
68
61
32
2d
32
35
0160
36
2c
65
63
64
73
61
2d
73
68
61
32
2d
6e
69
73
0170
74
70
32
35
36
2c
73
73
68
2d
65
64
32
35
35
31
0180
39
00
00
00
6c
63
68
61
63
68
61
32
30
2d
70
6f
0190
6c
79
31
33
30
35
40
6f
70
65
6e
73
73
68
2e
63
01A0
6f
6d
2c
61
65
73
31
32
38
2d
63
74
72
2c
61
65
01B0
73
31
39
32
2d
63
74
72
2c
61
65
73
32
35
36
2d
01C0
63
74
72
2c
61
65
73
31
32
38
2d
67
63
6d
40
6f
01D0
70
65
6e
73
73
68
2e
63
6f
6d
2c
61
65
73
32
35
01E0
36
2d
67
63
6d
40
6f
70
65
6e
73
73
68
2e
63
6f
01F0
6d
00
00
00
6c
63
68
61
63
68
61
32
30
2d
70
6f
0200
6c
79
31
33
30
35
40
6f
70
65
6e
73
73
68
2e
63
0210
6f
6d
2c
61
65
73
31
32
38
2d
63
74
72
2c
61
65
0220
73
31
39
32
2d
63
74
72
2c
61
65
73
32
35
36
2d
0230
63
74
72
2c
61
65
73
31
32
38
2d
67
63
6d
40
6f
0240
70
65
6e
73
73
68
2e
63
6f
6d
2c
61
65
73
32
35
0250
36
2d
67
63
6d
40
6f
70
65
6e
73
73
68
2e
63
6f
0260
6d
00
00
00
d5
75
6d
61
63
2d
36
34
2d
65
74
6d
0270
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
75
6d
61
0280
63
2d
31
32
38
2d
65
74
6d
40
6f
70
65
6e
73
73
0290
68
2e
63
6f
6d
2c
68
6d
61
63
2d
73
68
61
32
2d
02A0
32
35
36
2d
65
74
6d
40
6f
70
65
6e
73
73
68
2e
02B0
63
6f
6d
2c
68
6d
61
63
2d
73
68
61
32
2d
35
31
02C0
32
2d
65
74
6d
40
6f
70
65
6e
73
73
68
2e
63
6f
02D0
6d
2c
68
6d
61
63
2d
73
68
61
31
2d
65
74
6d
40
02E0
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
75
6d
61
63
02F0
2d
36
34
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
0300
75
6d
61
63
2d
31
32
38
40
6f
70
65
6e
73
73
68
0310
2e
63
6f
6d
2c
68
6d
61
63
2d
73
68
61
32
2d
32
0320
35
36
2c
68
6d
61
63
2d
73
68
61
32
2d
35
31
32
0330
2c
68
6d
61
63
2d
73
68
61
31
00
00
00
d5
75
6d
0340
61
63
2d
36
34
2d
65
74
6d
40
6f
70
65
6e
73
73
0350
68
2e
63
6f
6d
2c
75
6d
61
63
2d
31
32
38
2d
65
0360
74
6d
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
68
0370
6d
61
63
2d
73
68
61
32
2d
32
35
36
2d
65
74
6d
0380
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
68
6d
61
0390
63
2d
73
68
61
32
2d
35
31
32
2d
65
74
6d
40
6f
03A0
70
65
6e
73
73
68
2e
63
6f
6d
2c
68
6d
61
63
2d
03B0
73
68
61
31
2d
65
74
6d
40
6f
70
65
6e
73
73
68
03C0
2e
63
6f
6d
2c
75
6d
61
63
2d
36
34
40
6f
70
65
03D0
6e
73
73
68
2e
63
6f
6d
2c
75
6d
61
63
2d
31
32
03E0
38
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
68
6d
03F0
61
63
2d
73
68
61
32
2d
32
35
36
2c
68
6d
61
63
0400
2d
73
68
61
32
2d
35
31
32
2c
68
6d
61
63
2d
73
0410
68
61
31
00
00
00
15
6e
6f
6e
65
2c
7a
6c
69
62
0420
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
00
00
00
15
0430
6e
6f
6e
65
2c
7a
6c
69
62
40
6f
70
65
6e
73
73
0440
68
2e
63
6f
6d
00
00
00
00
00
00
00
00
00
00
00
0450
00
00
00
00
00
00
00
00
0000
.
.
¶
n
Ô
.
Ø
.
R
£
§
Ð
.
.
.
V
0010
.
`
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
4
.
.
Q
.
}
.
½
.
*
Y
è
.
0030
R
²
K
T
¯
.
.
.
.
.
c
u
r
v
e
2
0040
5
5
1
9
-
s
h
a
2
5
6
,
c
u
r
v
0050
e
2
5
5
1
9
-
s
h
a
2
5
6
@
l
i
0060
b
s
s
h
.
o
r
g
,
e
c
d
h
-
s
h
0070
a
2
-
n
i
s
t
p
2
5
6
,
e
c
d
h
0080
-
s
h
a
2
-
n
i
s
t
p
3
8
4
,
e
0090
c
d
h
-
s
h
a
2
-
n
i
s
t
p
5
2
00A0
1
,
d
i
f
f
i
e
-
h
e
l
l
m
a
n
00B0
-
g
r
o
u
p
-
e
x
c
h
a
n
g
e
-
00C0
s
h
a
2
5
6
,
d
i
f
f
i
e
-
h
e
00D0
l
l
m
a
n
-
g
r
o
u
p
1
6
-
s
h
00E0
a
5
1
2
,
d
i
f
f
i
e
-
h
e
l
l
00F0
m
a
n
-
g
r
o
u
p
1
8
-
s
h
a
5
0100
1
2
,
d
i
f
f
i
e
-
h
e
l
l
m
a
0110
n
-
g
r
o
u
p
1
4
-
s
h
a
2
5
6
0120
,
d
i
f
f
i
e
-
h
e
l
l
m
a
n
-
0130
g
r
o
u
p
1
4
-
s
h
a
1
.
.
.
A
0140
s
s
h
-
r
s
a
,
r
s
a
-
s
h
a
2
0150
-
5
1
2
,
r
s
a
-
s
h
a
2
-
2
5
0160
6
,
e
c
d
s
a
-
s
h
a
2
-
n
i
s
0170
t
p
2
5
6
,
s
s
h
-
e
d
2
5
5
1
0180
9
.
.
.
l
c
h
a
c
h
a
2
0
-
p
o
0190
l
y
1
3
0
5
@
o
p
e
n
s
s
h
.
c
01A0
o
m
,
a
e
s
1
2
8
-
c
t
r
,
a
e
01B0
s
1
9
2
-
c
t
r
,
a
e
s
2
5
6
-
01C0
c
t
r
,
a
e
s
1
2
8
-
g
c
m
@
o
01D0
p
e
n
s
s
h
.
c
o
m
,
a
e
s
2
5
01E0
6
-
g
c
m
@
o
p
e
n
s
s
h
.
c
o
01F0
m
.
.
.
l
c
h
a
c
h
a
2
0
-
p
o
0200
l
y
1
3
0
5
@
o
p
e
n
s
s
h
.
c
0210
o
m
,
a
e
s
1
2
8
-
c
t
r
,
a
e
0220
s
1
9
2
-
c
t
r
,
a
e
s
2
5
6
-
0230
c
t
r
,
a
e
s
1
2
8
-
g
c
m
@
o
0240
p
e
n
s
s
h
.
c
o
m
,
a
e
s
2
5
0250
6
-
g
c
m
@
o
p
e
n
s
s
h
.
c
o
0260
m
.
.
.
Õ
u
m
a
c
-
6
4
-
e
t
m
0270
@
o
p
e
n
s
s
h
.
c
o
m
,
u
m
a
0280
c
-
1
2
8
-
e
t
m
@
o
p
e
n
s
s
0290
h
.
c
o
m
,
h
m
a
c
-
s
h
a
2
-
02A0
2
5
6
-
e
t
m
@
o
p
e
n
s
s
h
.
02B0
c
o
m
,
h
m
a
c
-
s
h
a
2
-
5
1
02C0
2
-
e
t
m
@
o
p
e
n
s
s
h
.
c
o
02D0
m
,
h
m
a
c
-
s
h
a
1
-
e
t
m
@
02E0
o
p
e
n
s
s
h
.
c
o
m
,
u
m
a
c
02F0
-
6
4
@
o
p
e
n
s
s
h
.
c
o
m
,
0300
u
m
a
c
-
1
2
8
@
o
p
e
n
s
s
h
0310
.
c
o
m
,
h
m
a
c
-
s
h
a
2
-
2
0320
5
6
,
h
m
a
c
-
s
h
a
2
-
5
1
2
0330
,
h
m
a
c
-
s
h
a
1
.
.
.
Õ
u
m
0340
a
c
-
6
4
-
e
t
m
@
o
p
e
n
s
s
0350
h
.
c
o
m
,
u
m
a
c
-
1
2
8
-
e
0360
t
m
@
o
p
e
n
s
s
h
.
c
o
m
,
h
0370
m
a
c
-
s
h
a
2
-
2
5
6
-
e
t
m
0380
@
o
p
e
n
s
s
h
.
c
o
m
,
h
m
a
0390
c
-
s
h
a
2
-
5
1
2
-
e
t
m
@
o
03A0
p
e
n
s
s
h
.
c
o
m
,
h
m
a
c
-
03B0
s
h
a
1
-
e
t
m
@
o
p
e
n
s
s
h
03C0
.
c
o
m
,
u
m
a
c
-
6
4
@
o
p
e
03D0
n
s
s
h
.
c
o
m
,
u
m
a
c
-
1
2
03E0
8
@
o
p
e
n
s
s
h
.
c
o
m
,
h
m
03F0
a
c
-
s
h
a
2
-
2
5
6
,
h
m
a
c
0400
-
s
h
a
2
-
5
1
2
,
h
m
a
c
-
s
0410
h
a
1
.
.
.
.
n
o
n
e
,
z
l
i
b
0420
@
o
p
e
n
s
s
h
.
c
o
m
.
.
.
.
0430
n
o
n
e
,
z
l
i
b
@
o
p
e
n
s
s
0440
h
.
c
o
m
.
.
.
.
.
.
.
.
.
.
.
0450
.
.
.
.
.
.
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 42, Ack: 42, Len: 1080
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 1080
- Sequence number: 42 (relative sequence number)
- Acknowledgment number: 42 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 342
- Calculated window size: 43776
- Window size scaling factor: 128
- Checksum: 0x0460 [unverified]
- Urgent pointer: 0
- TCP payload (1080 bytes)
- SSH Protocol
- SSH Version 2
- Packet Length: 1076
- Padding Length: 6
- Key Exchange
- Message Code: Key Exchange Init (20)
- Algorithms
- Cookie: 511b7d0cbd182a59e81252b24b54af1f
- kex_algorithms length: 258
- kex_algorithms string [truncated]: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,di
- server_host_key_algorithms length: 65
- server_host_key_algorithms string: ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519
- encryption_algorithms_client_to_server length: 108
- encryption_algorithms_client_to_server string: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
- encryption_algorithms_server_to_client length: 108
- encryption_algorithms_server_to_client string: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
- mac_algorithms_client_to_server length: 213
- mac_algorithms_client_to_server string [truncated]: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-
- mac_algorithms_server_to_client length: 213
- mac_algorithms_server_to_client string [truncated]: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-
- compression_algorithms_client_to_server length: 21
- compression_algorithms_client_to_server string: none,zlib@openssh.com
- compression_algorithms_server_to_client length: 21
- compression_algorithms_server_to_client string: none,zlib@openssh.com
- languages_client_to_server length: 0
- languages_server_to_client length: 0
- First KEX Packet Follows: 0
- Reserved: 00000000
- Padding String: 000000000000
0000
b6
6e
00
16
52
a3
a7
d0
d4
7f
dc
ce
80
00
01
67
0010
00
28
00
00
0000
¶
n
.
.
R
£
§
Ð
Ô
.
Ü
Î
.
.
.
g
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 42, Ack: 1122, Len: 0
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 42 (relative sequence number)
- Acknowledgment number: 1122 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 359
- Calculated window size: 45952
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
b6
6e
00
16
52
a3
a7
d0
d4
7f
dc
ce
80
00
01
67
0010
05
78
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
05
4c
05
14
1c
b0
b2
7a
44
95
56
ac
68
00
0030
ca
e5
ca
db
ab
8e
00
00
01
30
63
75
72
76
65
32
0040
35
35
31
39
2d
73
68
61
32
35
36
2c
63
75
72
76
0050
65
32
35
35
31
39
2d
73
68
61
32
35
36
40
6c
69
0060
62
73
73
68
2e
6f
72
67
2c
65
63
64
68
2d
73
68
0070
61
32
2d
6e
69
73
74
70
32
35
36
2c
65
63
64
68
0080
2d
73
68
61
32
2d
6e
69
73
74
70
33
38
34
2c
65
0090
63
64
68
2d
73
68
61
32
2d
6e
69
73
74
70
35
32
00A0
31
2c
64
69
66
66
69
65
2d
68
65
6c
6c
6d
61
6e
00B0
2d
67
72
6f
75
70
2d
65
78
63
68
61
6e
67
65
2d
00C0
73
68
61
32
35
36
2c
64
69
66
66
69
65
2d
68
65
00D0
6c
6c
6d
61
6e
2d
67
72
6f
75
70
31
36
2d
73
68
00E0
61
35
31
32
2c
64
69
66
66
69
65
2d
68
65
6c
6c
00F0
6d
61
6e
2d
67
72
6f
75
70
31
38
2d
73
68
61
35
0100
31
32
2c
64
69
66
66
69
65
2d
68
65
6c
6c
6d
61
0110
6e
2d
67
72
6f
75
70
2d
65
78
63
68
61
6e
67
65
0120
2d
73
68
61
31
2c
64
69
66
66
69
65
2d
68
65
6c
0130
6c
6d
61
6e
2d
67
72
6f
75
70
31
34
2d
73
68
61
0140
32
35
36
2c
64
69
66
66
69
65
2d
68
65
6c
6c
6d
0150
61
6e
2d
67
72
6f
75
70
31
34
2d
73
68
61
31
2c
0160
65
78
74
2d
69
6e
66
6f
2d
63
00
00
01
22
65
63
0170
64
73
61
2d
73
68
61
32
2d
6e
69
73
74
70
32
35
0180
36
2d
63
65
72
74
2d
76
30
31
40
6f
70
65
6e
73
0190
73
68
2e
63
6f
6d
2c
65
63
64
73
61
2d
73
68
61
01A0
32
2d
6e
69
73
74
70
33
38
34
2d
63
65
72
74
2d
01B0
76
30
31
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
01C0
65
63
64
73
61
2d
73
68
61
32
2d
6e
69
73
74
70
01D0
35
32
31
2d
63
65
72
74
2d
76
30
31
40
6f
70
65
01E0
6e
73
73
68
2e
63
6f
6d
2c
65
63
64
73
61
2d
73
01F0
68
61
32
2d
6e
69
73
74
70
32
35
36
2c
65
63
64
0200
73
61
2d
73
68
61
32
2d
6e
69
73
74
70
33
38
34
0210
2c
65
63
64
73
61
2d
73
68
61
32
2d
6e
69
73
74
0220
70
35
32
31
2c
73
73
68
2d
65
64
32
35
35
31
39
0230
2d
63
65
72
74
2d
76
30
31
40
6f
70
65
6e
73
73
0240
68
2e
63
6f
6d
2c
73
73
68
2d
72
73
61
2d
63
65
0250
72
74
2d
76
30
31
40
6f
70
65
6e
73
73
68
2e
63
0260
6f
6d
2c
73
73
68
2d
65
64
32
35
35
31
39
2c
72
0270
73
61
2d
73
68
61
32
2d
35
31
32
2c
72
73
61
2d
0280
73
68
61
32
2d
32
35
36
2c
73
73
68
2d
72
73
61
0290
00
00
00
6c
63
68
61
63
68
61
32
30
2d
70
6f
6c
02A0
79
31
33
30
35
40
6f
70
65
6e
73
73
68
2e
63
6f
02B0
6d
2c
61
65
73
31
32
38
2d
63
74
72
2c
61
65
73
02C0
31
39
32
2d
63
74
72
2c
61
65
73
32
35
36
2d
63
02D0
74
72
2c
61
65
73
31
32
38
2d
67
63
6d
40
6f
70
02E0
65
6e
73
73
68
2e
63
6f
6d
2c
61
65
73
32
35
36
02F0
2d
67
63
6d
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
0300
00
00
00
6c
63
68
61
63
68
61
32
30
2d
70
6f
6c
0310
79
31
33
30
35
40
6f
70
65
6e
73
73
68
2e
63
6f
0320
6d
2c
61
65
73
31
32
38
2d
63
74
72
2c
61
65
73
0330
31
39
32
2d
63
74
72
2c
61
65
73
32
35
36
2d
63
0340
74
72
2c
61
65
73
31
32
38
2d
67
63
6d
40
6f
70
0350
65
6e
73
73
68
2e
63
6f
6d
2c
61
65
73
32
35
36
0360
2d
67
63
6d
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
0370
00
00
00
d5
75
6d
61
63
2d
36
34
2d
65
74
6d
40
0380
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
75
6d
61
63
0390
2d
31
32
38
2d
65
74
6d
40
6f
70
65
6e
73
73
68
03A0
2e
63
6f
6d
2c
68
6d
61
63
2d
73
68
61
32
2d
32
03B0
35
36
2d
65
74
6d
40
6f
70
65
6e
73
73
68
2e
63
03C0
6f
6d
2c
68
6d
61
63
2d
73
68
61
32
2d
35
31
32
03D0
2d
65
74
6d
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
03E0
2c
68
6d
61
63
2d
73
68
61
31
2d
65
74
6d
40
6f
03F0
70
65
6e
73
73
68
2e
63
6f
6d
2c
75
6d
61
63
2d
0400
36
34
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
75
0410
6d
61
63
2d
31
32
38
40
6f
70
65
6e
73
73
68
2e
0420
63
6f
6d
2c
68
6d
61
63
2d
73
68
61
32
2d
32
35
0430
36
2c
68
6d
61
63
2d
73
68
61
32
2d
35
31
32
2c
0440
68
6d
61
63
2d
73
68
61
31
00
00
00
d5
75
6d
61
0450
63
2d
36
34
2d
65
74
6d
40
6f
70
65
6e
73
73
68
0460
2e
63
6f
6d
2c
75
6d
61
63
2d
31
32
38
2d
65
74
0470
6d
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
68
6d
0480
61
63
2d
73
68
61
32
2d
32
35
36
2d
65
74
6d
40
0490
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
68
6d
61
63
04A0
2d
73
68
61
32
2d
35
31
32
2d
65
74
6d
40
6f
70
04B0
65
6e
73
73
68
2e
63
6f
6d
2c
68
6d
61
63
2d
73
04C0
68
61
31
2d
65
74
6d
40
6f
70
65
6e
73
73
68
2e
04D0
63
6f
6d
2c
75
6d
61
63
2d
36
34
40
6f
70
65
6e
04E0
73
73
68
2e
63
6f
6d
2c
75
6d
61
63
2d
31
32
38
04F0
40
6f
70
65
6e
73
73
68
2e
63
6f
6d
2c
68
6d
61
0500
63
2d
73
68
61
32
2d
32
35
36
2c
68
6d
61
63
2d
0510
73
68
61
32
2d
35
31
32
2c
68
6d
61
63
2d
73
68
0520
61
31
00
00
00
1a
7a
6c
69
62
40
6f
70
65
6e
73
0530
73
68
2e
63
6f
6d
2c
7a
6c
69
62
2c
6e
6f
6e
65
0540
00
00
00
1a
7a
6c
69
62
40
6f
70
65
6e
73
73
68
0550
2e
63
6f
6d
2c
7a
6c
69
62
2c
6e
6f
6e
65
00
00
0560
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0000
¶
n
.
.
R
£
§
Ð
Ô
.
Ü
Î
.
.
.
g
0010
.
x
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
L
.
.
.
°
²
z
D
.
V
¬
h
.
0030
Ê
å
Ê
Û
«
.
.
.
.
0
c
u
r
v
e
2
0040
5
5
1
9
-
s
h
a
2
5
6
,
c
u
r
v
0050
e
2
5
5
1
9
-
s
h
a
2
5
6
@
l
i
0060
b
s
s
h
.
o
r
g
,
e
c
d
h
-
s
h
0070
a
2
-
n
i
s
t
p
2
5
6
,
e
c
d
h
0080
-
s
h
a
2
-
n
i
s
t
p
3
8
4
,
e
0090
c
d
h
-
s
h
a
2
-
n
i
s
t
p
5
2
00A0
1
,
d
i
f
f
i
e
-
h
e
l
l
m
a
n
00B0
-
g
r
o
u
p
-
e
x
c
h
a
n
g
e
-
00C0
s
h
a
2
5
6
,
d
i
f
f
i
e
-
h
e
00D0
l
l
m
a
n
-
g
r
o
u
p
1
6
-
s
h
00E0
a
5
1
2
,
d
i
f
f
i
e
-
h
e
l
l
00F0
m
a
n
-
g
r
o
u
p
1
8
-
s
h
a
5
0100
1
2
,
d
i
f
f
i
e
-
h
e
l
l
m
a
0110
n
-
g
r
o
u
p
-
e
x
c
h
a
n
g
e
0120
-
s
h
a
1
,
d
i
f
f
i
e
-
h
e
l
0130
l
m
a
n
-
g
r
o
u
p
1
4
-
s
h
a
0140
2
5
6
,
d
i
f
f
i
e
-
h
e
l
l
m
0150
a
n
-
g
r
o
u
p
1
4
-
s
h
a
1
,
0160
e
x
t
-
i
n
f
o
-
c
.
.
.
"
e
c
0170
d
s
a
-
s
h
a
2
-
n
i
s
t
p
2
5
0180
6
-
c
e
r
t
-
v
0
1
@
o
p
e
n
s
0190
s
h
.
c
o
m
,
e
c
d
s
a
-
s
h
a
01A0
2
-
n
i
s
t
p
3
8
4
-
c
e
r
t
-
01B0
v
0
1
@
o
p
e
n
s
s
h
.
c
o
m
,
01C0
e
c
d
s
a
-
s
h
a
2
-
n
i
s
t
p
01D0
5
2
1
-
c
e
r
t
-
v
0
1
@
o
p
e
01E0
n
s
s
h
.
c
o
m
,
e
c
d
s
a
-
s
01F0
h
a
2
-
n
i
s
t
p
2
5
6
,
e
c
d
0200
s
a
-
s
h
a
2
-
n
i
s
t
p
3
8
4
0210
,
e
c
d
s
a
-
s
h
a
2
-
n
i
s
t
0220
p
5
2
1
,
s
s
h
-
e
d
2
5
5
1
9
0230
-
c
e
r
t
-
v
0
1
@
o
p
e
n
s
s
0240
h
.
c
o
m
,
s
s
h
-
r
s
a
-
c
e
0250
r
t
-
v
0
1
@
o
p
e
n
s
s
h
.
c
0260
o
m
,
s
s
h
-
e
d
2
5
5
1
9
,
r
0270
s
a
-
s
h
a
2
-
5
1
2
,
r
s
a
-
0280
s
h
a
2
-
2
5
6
,
s
s
h
-
r
s
a
0290
.
.
.
l
c
h
a
c
h
a
2
0
-
p
o
l
02A0
y
1
3
0
5
@
o
p
e
n
s
s
h
.
c
o
02B0
m
,
a
e
s
1
2
8
-
c
t
r
,
a
e
s
02C0
1
9
2
-
c
t
r
,
a
e
s
2
5
6
-
c
02D0
t
r
,
a
e
s
1
2
8
-
g
c
m
@
o
p
02E0
e
n
s
s
h
.
c
o
m
,
a
e
s
2
5
6
02F0
-
g
c
m
@
o
p
e
n
s
s
h
.
c
o
m
0300
.
.
.
l
c
h
a
c
h
a
2
0
-
p
o
l
0310
y
1
3
0
5
@
o
p
e
n
s
s
h
.
c
o
0320
m
,
a
e
s
1
2
8
-
c
t
r
,
a
e
s
0330
1
9
2
-
c
t
r
,
a
e
s
2
5
6
-
c
0340
t
r
,
a
e
s
1
2
8
-
g
c
m
@
o
p
0350
e
n
s
s
h
.
c
o
m
,
a
e
s
2
5
6
0360
-
g
c
m
@
o
p
e
n
s
s
h
.
c
o
m
0370
.
.
.
Õ
u
m
a
c
-
6
4
-
e
t
m
@
0380
o
p
e
n
s
s
h
.
c
o
m
,
u
m
a
c
0390
-
1
2
8
-
e
t
m
@
o
p
e
n
s
s
h
03A0
.
c
o
m
,
h
m
a
c
-
s
h
a
2
-
2
03B0
5
6
-
e
t
m
@
o
p
e
n
s
s
h
.
c
03C0
o
m
,
h
m
a
c
-
s
h
a
2
-
5
1
2
03D0
-
e
t
m
@
o
p
e
n
s
s
h
.
c
o
m
03E0
,
h
m
a
c
-
s
h
a
1
-
e
t
m
@
o
03F0
p
e
n
s
s
h
.
c
o
m
,
u
m
a
c
-
0400
6
4
@
o
p
e
n
s
s
h
.
c
o
m
,
u
0410
m
a
c
-
1
2
8
@
o
p
e
n
s
s
h
.
0420
c
o
m
,
h
m
a
c
-
s
h
a
2
-
2
5
0430
6
,
h
m
a
c
-
s
h
a
2
-
5
1
2
,
0440
h
m
a
c
-
s
h
a
1
.
.
.
Õ
u
m
a
0450
c
-
6
4
-
e
t
m
@
o
p
e
n
s
s
h
0460
.
c
o
m
,
u
m
a
c
-
1
2
8
-
e
t
0470
m
@
o
p
e
n
s
s
h
.
c
o
m
,
h
m
0480
a
c
-
s
h
a
2
-
2
5
6
-
e
t
m
@
0490
o
p
e
n
s
s
h
.
c
o
m
,
h
m
a
c
04A0
-
s
h
a
2
-
5
1
2
-
e
t
m
@
o
p
04B0
e
n
s
s
h
.
c
o
m
,
h
m
a
c
-
s
04C0
h
a
1
-
e
t
m
@
o
p
e
n
s
s
h
.
04D0
c
o
m
,
u
m
a
c
-
6
4
@
o
p
e
n
04E0
s
s
h
.
c
o
m
,
u
m
a
c
-
1
2
8
04F0
@
o
p
e
n
s
s
h
.
c
o
m
,
h
m
a
0500
c
-
s
h
a
2
-
2
5
6
,
h
m
a
c
-
0510
s
h
a
2
-
5
1
2
,
h
m
a
c
-
s
h
0520
a
1
.
.
.
.
z
l
i
b
@
o
p
e
n
s
0530
s
h
.
c
o
m
,
z
l
i
b
,
n
o
n
e
0540
.
.
.
.
z
l
i
b
@
o
p
e
n
s
s
h
0550
.
c
o
m
,
z
l
i
b
,
n
o
n
e
.
.
0560
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 42, Ack: 1122, Len: 1360
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 1360
- Sequence number: 42 (relative sequence number)
- Acknowledgment number: 1122 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 359
- Calculated window size: 45952
- Window size scaling factor: 128
- Checksum: 0x0578 [unverified]
- Urgent pointer: 0
- TCP payload (1360 bytes)
- SSH Protocol
- SSH Version 2
- Packet Length: 1356
- Padding Length: 5
- Key Exchange
- Message Code: Key Exchange Init (20)
- Algorithms
- Cookie: 1cb0b27a449556ac6800cae5cadbab8e
- kex_algorithms length: 304
- kex_algorithms string [truncated]: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,di
- server_host_key_algorithms length: 290
- server_host_key_algorithms string [truncated]: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25
- encryption_algorithms_client_to_server length: 108
- encryption_algorithms_client_to_server string: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
- encryption_algorithms_server_to_client length: 108
- encryption_algorithms_server_to_client string: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
- mac_algorithms_client_to_server length: 213
- mac_algorithms_client_to_server string [truncated]: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-
- mac_algorithms_server_to_client length: 213
- mac_algorithms_server_to_client string [truncated]: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-
- compression_algorithms_client_to_server length: 26
- compression_algorithms_client_to_server string: zlib@openssh.com,zlib,none
- compression_algorithms_server_to_client length: 26
- compression_algorithms_server_to_client string: zlib@openssh.com,zlib,none
- languages_client_to_server length: 0
- languages_server_to_client length: 0
- First KEX Packet Follows: 0
- Reserved: 00000000
- Padding String: 0000000000
0000
00
16
b6
6e
d4
7f
dc
ce
52
a3
ad
20
80
00
05
55
0010
00
28
00
00
0000
.
.
¶
n
Ô
.
Ü
Î
R
£
.
.
.
.
U
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 1122, Ack: 1402, Len: 0
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 0
- Sequence number: 1122 (relative sequence number)
- Acknowledgment number: 1402 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1365
- Calculated window size: 174720
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
b6
6e
00
16
52
a3
ad
20
d4
7f
dc
ce
80
00
01
67
0010
00
58
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
00
2c
06
1e
00
00
00
20
f1
20
a3
bd
2a
ca
0030
9e
19
67
ef
3c
64
a2
8e
c5
37
3b
06
97
4e
94
a0
0040
3e
99
41
30
f5
54
c6
9b
a6
3c
00
00
00
00
00
00
0000
¶
n
.
.
R
£
.
Ô
.
Ü
Î
.
.
.
g
0010
.
X
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
,
.
.
.
.
.
ñ
£
½
*
Ê
0030
.
.
g
ï
<
d
¢
.
Å
7
;
.
.
N
.
.
0040
>
.
A
0
õ
T
Æ
.
¦
<
.
.
.
.
.
.
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 1402, Ack: 1122, Len: 48
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 48
- Sequence number: 1402 (relative sequence number)
- Acknowledgment number: 1122 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 359
- Calculated window size: 45952
- Window size scaling factor: 128
- Checksum: 0x0058 [unverified]
- Urgent pointer: 0
- TCP payload (48 bytes)
- SSH Protocol
- SSH Version 2
- Packet Length: 44
- Padding Length: 6
- Key Exchange
- Message Code: Diffie-Hellman Key Exchange Init (30)
- Multi Precision Integer Length: 32
- DH client e: f120a3bd2aca9e1967ef3c64a28ec5373b06974e94a03e99...
- Padding String: 000000000000
0000
00
16
b6
6e
d4
7f
dc
ce
52
a3
ad
50
80
00
05
55
0010
00
28
00
00
0000
.
.
¶
n
Ô
.
Ü
Î
R
£
.
P
.
.
.
U
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 1122, Ack: 1450, Len: 0
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 0
- Sequence number: 1122 (relative sequence number)
- Acknowledgment number: 1450 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1365
- Calculated window size: 174720
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
b6
6e
d4
7f
dc
ce
52
a3
ad
50
80
00
05
55
0010
01
ec
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
01
04
0a
1f
00
00
00
68
00
00
00
13
65
63
0030
64
73
61
2d
73
68
61
32
2d
6e
69
73
74
70
32
35
0040
36
00
00
00
08
6e
69
73
74
70
32
35
36
00
00
00
0050
41
04
13
78
67
bd
71
5d
44
ac
fd
00
d6
aa
2a
ac
0060
a0
35
a3
26
f9
00
74
41
36
ef
28
a6
45
61
10
54
0070
ac
c8
b6
ac
57
91
22
93
9a
ae
25
2f
40
98
03
bb
0080
fe
8e
2c
dc
83
ee
fe
d2
e9
1a
5d
7c
ed
f8
87
ea
0090
c5
e8
00
00
00
20
46
2e
b8
dc
2d
8b
22
ef
77
2c
00A0
2f
93
81
e1
c6
c5
2d
84
1f
1d
ce
ad
29
3b
29
7e
00B0
5b
b1
ad
99
af
09
00
00
00
64
00
00
00
13
65
63
00C0
64
73
61
2d
73
68
61
32
2d
6e
69
73
74
70
32
35
00D0
36
00
00
00
49
00
00
00
21
00
d1
c3
3a
cc
dd
78
00E0
69
05
0e
7a
4a
7d
76
cd
ae
cc
66
25
34
07
a1
8d
00F0
1e
c1
1d
40
0a
68
97
a6
2e
49
00
00
00
20
02
c5
0100
45
10
c8
4f
a0
2c
14
44
01
bd
4f
f5
4b
44
c7
b0
0110
1e
61
35
0e
d6
22
5f
97
cc
7e
ee
86
ec
39
00
00
0120
00
00
00
00
00
00
00
00
00
00
00
0c
0a
15
00
00
0130
00
00
00
00
00
00
00
00
26
d0
38
b8
6b
30
14
3a
0140
83
1f
52
d0
6d
75
bd
9a
11
01
02
80
96
41
dd
b4
0150
20
b0
1e
cd
5c
64
2f
bc
ed
cc
1b
3e
1a
70
c9
f6
0160
fc
af
c6
3f
a3
cb
89
fb
98
b9
94
12
7b
64
8f
57
0170
6a
d7
65
75
43
e4
29
d2
f1
09
98
a8
3e
1c
63
bc
0180
db
e2
e8
55
b4
20
fc
7a
dc
63
57
b9
f1
50
52
39
0190
dd
05
22
c4
03
b4
a6
90
ce
c8
33
12
17
3b
63
36
01A0
4d
57
9a
8d
c7
cc
b2
5b
59
42
2f
34
62
f9
56
58
01B0
43
e2
d0
1d
c1
c6
f7
20
3e
42
b2
f0
9f
c0
ba
8c
01C0
4f
67
43
b1
be
4f
95
28
22
ed
3e
97
96
4f
78
62
01D0
d6
6b
3e
38
d6
04
a1
a3
e9
25
fa
9e
82
67
44
5b
01E0
62
d0
ca
83
0000
.
.
¶
n
Ô
.
Ü
Î
R
£
.
P
.
.
.
U
0010
.
ì
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
.
.
.
.
.
.
h
.
.
.
.
e
c
0030
d
s
a
-
s
h
a
2
-
n
i
s
t
p
2
5
0040
6
.
.
.
.
n
i
s
t
p
2
5
6
.
.
.
0050
A
.
.
x
g
½
q
]
D
¬
ý
.
Ö
ª
*
¬
0060
.
5
£
&
ù
.
t
A
6
ï
(
¦
E
a
.
T
0070
¬
È
¶
¬
W
.
"
.
.
®
%
/
@
.
.
»
0080
þ
.
,
Ü
.
î
þ
Ò
é
.
]
|
í
ø
.
ê
0090
Å
è
.
.
.
F
.
¸
Ü
-
.
"
ï
w
,
00A0
/
.
.
á
Æ
Å
-
.
.
.
Î
.
)
;
)
~
00B0
[
±
.
.
¯
.
.
.
.
d
.
.
.
.
e
c
00C0
d
s
a
-
s
h
a
2
-
n
i
s
t
p
2
5
00D0
6
.
.
.
I
.
.
.
!
.
Ñ
Ã
:
Ì
Ý
x
00E0
i
.
.
z
J
}
v
Í
®
Ì
f
%
4
.
¡
.
00F0
.
Á
.
@
.
h
.
¦
.
I
.
.
.
.
Å
0100
E
.
È
O
.
,
.
D
.
½
O
õ
K
D
Ç
°
0110
.
a
5
.
Ö
"
_
.
Ì
~
î
.
ì
9
.
.
0120
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0130
.
.
.
.
.
.
.
.
&
Ð
8
¸
k
0
.
:
0140
.
.
R
Ð
m
u
½
.
.
.
.
.
.
A
Ý
´
0150
°
.
Í
\
d
/
¼
í
Ì
.
>
.
p
É
ö
0160
ü
¯
Æ
?
£
Ë
.
û
.
¹
.
.
{
d
.
W
0170
j
×
e
u
C
ä
)
Ò
ñ
.
.
¨
>
.
c
¼
0180
Û
â
è
U
´
ü
z
Ü
c
W
¹
ñ
P
R
9
0190
Ý
.
"
Ä
.
´
¦
.
Î
È
3
.
.
;
c
6
01A0
M
W
.
.
Ç
Ì
²
[
Y
B
/
4
b
ù
V
X
01B0
C
â
Ð
.
Á
Æ
÷
>
B
²
ð
.
À
º
.
01C0
O
g
C
±
¾
O
.
(
"
í
>
.
.
O
x
b
01D0
Ö
k
>
8
Ö
.
¡
£
é
%
ú
.
.
g
D
[
01E0
b
Ð
Ê
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 1122, Ack: 1450, Len: 452
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 452
- Sequence number: 1122 (relative sequence number)
- Acknowledgment number: 1450 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1365
- Calculated window size: 174720
- Window size scaling factor: 128
- Checksum: 0x01ec [unverified]
- Urgent pointer: 0
- TCP payload (452 bytes)
- SSH Protocol
- SSH Version 2
- Packet Length: 260
- Padding Length: 10
- Key Exchange
- Message Code: Diffie-Hellman Key Exchange Reply (31)
- KEX host key (type: ecdsa-sha2-nistp256)
- Host key length: 104
- Host key type: ecdsa-sha2-nistp256
- ECDSA elliptic curve identifier length: 8
- ECDSA elliptic curve identifier: nistp256
- ECDSA public key length: 65
- ECDSA public key (Q): 04137867bd715d44acfd00d6aa2aaca035a326f900744136...
- Multi Precision Integer Length: 32
- DH server f: 462eb8dc2d8b22ef772c2f9381e1c6c52d841f1dcead293b...
- KEX H signature length: 100
- KEX H signature: 0000001365636473612d736861322d6e6973747032353600...
- Padding String: 00000000000000000000
- SSH Version 2
- Packet Length: 12
- Padding Length: 10
- Key Exchange
- Message Code: New Keys (21)
- Padding String: 00000000000000000000
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): 26d038b8
- Encrypted Packet: 6b30143a831f52d06d75bd9a110102809641ddb420b01ecd...
- MAC: d604a1a3e925fa9e8267445b62d0ca83
0000
b6
6e
00
16
52
a3
ad
50
d4
7f
de
92
80
00
01
78
0010
00
38
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
00
00
00
0c
0a
15
00
00
00
00
00
00
00
00
00
00
0000
¶
n
.
.
R
£
.
P
Ô
.
Þ
.
.
.
.
x
0010
.
8
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 1450, Ack: 1574, Len: 16
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 16
- Sequence number: 1450 (relative sequence number)
- Acknowledgment number: 1574 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 376
- Calculated window size: 48128
- Window size scaling factor: 128
- Checksum: 0x0038 [unverified]
- Urgent pointer: 0
- TCP payload (16 bytes)
- SSH Protocol
- SSH Version 2
- Packet Length: 12
- Padding Length: 10
- Key Exchange
- Message Code: New Keys (21)
- Padding String: 00000000000000000000
0000
00
16
b6
6e
d4
7f
de
92
52
a3
ad
60
80
00
05
55
0010
00
28
00
00
0000
.
.
¶
n
Ô
.
Þ
.
R
£
.
`
.
.
.
U
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 1574, Ack: 1466, Len: 0
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 0
- Sequence number: 1574 (relative sequence number)
- Acknowledgment number: 1466 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1365
- Calculated window size: 174720
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
b6
6e
00
16
52
a3
ad
60
d4
7f
de
92
80
00
01
78
0010
00
54
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
85
1e
eb
d2
f2
5f
0b
9e
02
53
be
6d
df
cc
8f
17
0030
f2
44
f8
2c
b6
7e
69
a8
4c
59
04
b8
99
03
b9
ef
0040
f5
d6
16
89
d4
8e
0f
c4
01
96
4c
db
0000
¶
n
.
.
R
£
.
`
Ô
.
Þ
.
.
.
.
x
0010
.
T
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
.
ë
Ò
ò
_
.
.
.
S
¾
m
ß
Ì
.
.
0030
ò
D
ø
,
¶
~
i
¨
L
Y
.
¸
.
.
¹
ï
0040
õ
Ö
.
.
Ô
.
.
Ä
.
.
L
Û
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 1466, Ack: 1574, Len: 44
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 44
- Sequence number: 1466 (relative sequence number)
- Acknowledgment number: 1574 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 376
- Calculated window size: 48128
- Window size scaling factor: 128
- Checksum: 0x0054 [unverified]
- Urgent pointer: 0
- TCP payload (44 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): 851eebd2
- Encrypted Packet: f25f0b9e0253be6ddfcc8f17f244f82cb67e69a84c5904b8
- MAC: 9903b9eff5d61689d48e0fc401964cdb
0000
00
16
b6
6e
d4
7f
de
92
52
a3
ad
8c
80
00
05
55
0010
00
28
00
00
0000
.
.
¶
n
Ô
.
Þ
.
R
£
.
.
.
.
.
U
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 1574, Ack: 1510, Len: 0
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 0
- Sequence number: 1574 (relative sequence number)
- Acknowledgment number: 1510 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1365
- Calculated window size: 174720
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
b6
6e
d4
7f
de
92
52
a3
ad
8c
80
00
05
55
0010
00
54
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
ef
b8
54
99
94
03
ad
7f
ba
c5
8c
03
7a
f2
f4
80
0030
70
5e
64
40
ed
db
04
b7
32
15
62
1e
ec
95
22
36
0040
11
cd
95
49
72
b1
55
df
d8
9b
6c
97
0000
.
.
¶
n
Ô
.
Þ
.
R
£
.
.
.
.
.
U
0010
.
T
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
ï
¸
T
.
.
.
.
.
º
Å
.
.
z
ò
ô
.
0030
p
^
d
@
í
Û
.
·
2
.
b
.
ì
.
"
6
0040
.
Í
.
I
r
±
U
ß
Ø
.
l
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 1574, Ack: 1510, Len: 44
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 44
- Sequence number: 1574 (relative sequence number)
- Acknowledgment number: 1510 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1365
- Calculated window size: 174720
- Window size scaling factor: 128
- Checksum: 0x0054 [unverified]
- Urgent pointer: 0
- TCP payload (44 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): efb85499
- Encrypted Packet: 9403ad7fbac58c037af2f480705e6440eddb04b73215621e
- MAC: ec95223611cd954972b155dfd89b6c97
0000
b6
6e
00
16
52
a3
ad
8c
d4
7f
de
be
80
00
01
78
0010
00
64
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
74
96
fd
28
85
d8
d0
06
78
fc
0b
28
91
bf
f2
51
0030
90
ae
5e
24
16
99
e0
1c
ba
b6
15
75
4b
88
09
29
0040
90
47
e9
b0
77
e2
ec
5f
c1
d0
a1
ca
74
41
20
12
0050
f1
f2
c6
36
b6
6b
57
d8
08
d7
60
15
0000
¶
n
.
.
R
£
.
.
Ô
.
Þ
¾
.
.
.
x
0010
.
d
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
t
.
ý
(
.
Ø
Ð
.
x
ü
.
(
.
¿
ò
Q
0030
.
®
^
$
.
.
à
.
º
¶
.
u
K
.
.
)
0040
.
G
é
°
w
â
ì
_
Á
Ð
¡
Ê
t
A
.
0050
ñ
ò
Æ
6
¶
k
W
Ø
.
×
`
.
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 1510, Ack: 1618, Len: 60
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 60
- Sequence number: 1510 (relative sequence number)
- Acknowledgment number: 1618 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 376
- Calculated window size: 48128
- Window size scaling factor: 128
- Checksum: 0x0064 [unverified]
- Urgent pointer: 0
- TCP payload (60 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): 7496fd28
- Encrypted Packet: 85d8d00678fc0b2891bff25190ae5e241699e01cbab61575...
- MAC: 74412012f1f2c636b66b57d808d76015
0000
00
16
b6
6e
d4
7f
de
be
52
a3
ad
c8
80
00
05
55
0010
00
5c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
34
c3
97
d2
91
6e
9b
bf
ce
1f
c7
19
ee
0b
8f
48
0030
f9
2b
ef
7b
8c
0b
4a
44
d3
ad
99
04
61
ff
8b
0f
0040
67
c1
ff
0e
56
87
fd
13
8d
c5
29
4d
52
95
fc
ca
0050
24
2a
d9
86
0000
.
.
¶
n
Ô
.
Þ
¾
R
£
.
È
.
.
.
U
0010
.
\
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
4
Ã
.
Ò
.
n
.
¿
Î
.
Ç
.
î
.
.
H
0030
ù
+
ï
{
.
.
J
D
Ó
.
.
.
a
ÿ
.
.
0040
g
Á
ÿ
.
V
.
ý
.
.
Å
)
M
R
.
ü
Ê
0050
$
*
Ù
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 1618, Ack: 1570, Len: 52
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 52
- Sequence number: 1618 (relative sequence number)
- Acknowledgment number: 1570 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1365
- Calculated window size: 174720
- Window size scaling factor: 128
- Checksum: 0x005c [unverified]
- Urgent pointer: 0
- TCP payload (52 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): 34c397d2
- Encrypted Packet: 916e9bbfce1fc719ee0b8f48f92bef7b8c0b4a44d3ad9904...
- MAC: 5687fd138dc5294d5295fcca242ad986
0000
b6
6e
00
16
52
a3
ad
c8
d4
7f
de
f2
80
00
01
78
0010
01
9c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
88
22
56
79
6e
a2
12
43
be
65
52
20
8e
7b
ea
98
0030
4e
a4
15
59
5c
80
6e
ae
d9
39
04
d8
3c
f5
03
de
0040
bd
b2
b5
30
f1
c1
c2
95
e0
2d
63
bc
8d
d3
c9
7d
0050
15
d1
61
c4
cf
27
56
1b
e3
09
37
64
25
92
2f
d5
0060
e5
ad
52
58
42
eb
c3
1b
d0
22
41
41
93
58
3b
a4
0070
25
7f
f3
54
c0
ac
89
14
86
40
df
eb
4b
b6
67
89
0080
20
fc
ae
cb
38
39
7b
72
79
10
39
4a
36
b7
d0
10
0090
25
b6
45
b9
ee
2a
f6
0b
7a
05
d1
2d
38
be
e2
ed
00A0
31
1f
e7
0b
c3
1b
6f
e9
49
14
d9
7a
74
23
77
a8
00B0
70
fa
96
4f
bf
e4
b7
ff
44
dc
56
c8
fb
08
ca
45
00C0
91
62
3c
b8
04
4a
d8
44
39
a9
9e
53
0a
c1
4f
c6
00D0
f6
b7
75
da
d0
7f
4e
76
1f
d9
45
bf
a6
6b
de
b2
00E0
30
2f
b2
02
3e
d7
81
da
a6
f9
b9
63
70
dc
1d
ab
00F0
12
73
9b
c0
f6
d2
c5
37
8c
91
0e
80
a0
22
cf
bf
0100
c9
92
35
b6
ce
c9
be
db
cc
01
4e
31
2d
37
01
6f
0110
79
17
cf
be
4c
bf
81
b2
ed
e4
3a
86
d8
28
d6
0b
0120
9a
9d
dc
b3
f8
60
e3
73
f5
0b
07
ee
95
c8
b3
ae
0130
7c
7b
51
28
7c
b2
fc
4e
02
ba
f0
3d
f7
e5
71
c2
0140
98
30
ff
3c
af
2c
04
0e
ba
86
46
66
8c
9e
c6
ff
0150
f0
c8
c3
14
2a
9c
e1
6e
50
e1
3f
4a
80
e0
93
86
0160
bb
09
d1
db
19
b9
c9
99
9f
a6
c7
92
61
85
04
8a
0170
22
6d
09
9f
1f
4b
ec
20
38
7f
b7
56
84
7c
11
a2
0180
82
b2
77
82
03
df
07
43
37
36
87
5c
38
6e
72
fe
0190
e3
3e
b1
a9
0000
¶
n
.
.
R
£
.
È
Ô
.
Þ
ò
.
.
.
x
0010
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
"
V
y
n
¢
.
C
¾
e
R
.
{
ê
.
0030
N
¤
.
Y
\
.
n
®
Ù
9
.
Ø
<
õ
.
Þ
0040
½
²
µ
0
ñ
Á
Â
.
à
-
c
¼
.
Ó
É
}
0050
.
Ñ
a
Ä
Ï
'
V
.
ã
.
7
d
%
.
/
Õ
0060
å
.
R
X
B
ë
Ã
.
Ð
"
A
A
.
X
;
¤
0070
%
.
ó
T
À
¬
.
.
.
@
ß
ë
K
¶
g
.
0080
ü
®
Ë
8
9
{
r
y
.
9
J
6
·
Ð
.
0090
%
¶
E
¹
î
*
ö
.
z
.
Ñ
-
8
¾
â
í
00A0
1
.
ç
.
Ã
.
o
é
I
.
Ù
z
t
#
w
¨
00B0
p
ú
.
O
¿
ä
·
ÿ
D
Ü
V
È
û
.
Ê
E
00C0
.
b
<
¸
.
J
Ø
D
9
©
.
S
.
Á
O
Æ
00D0
ö
·
u
Ú
Ð
.
N
v
.
Ù
E
¿
¦
k
Þ
²
00E0
0
/
²
.
>
×
.
Ú
¦
ù
¹
c
p
Ü
.
«
00F0
.
s
.
À
ö
Ò
Å
7
.
.
.
.
.
"
Ï
¿
0100
É
.
5
¶
Î
É
¾
Û
Ì
.
N
1
-
7
.
o
0110
y
.
Ï
¾
L
¿
.
²
í
ä
:
.
Ø
(
Ö
.
0120
.
.
Ü
³
ø
`
ã
s
õ
.
.
î
.
È
³
®
0130
|
{
Q
(
|
²
ü
N
.
º
ð
=
÷
å
q
Â
0140
.
0
ÿ
<
¯
,
.
.
º
.
F
f
.
.
Æ
ÿ
0150
ð
È
Ã
.
*
.
á
n
P
á
?
J
.
à
.
.
0160
»
.
Ñ
Û
.
¹
É
.
.
¦
Ç
.
a
.
.
.
0170
"
m
.
.
.
K
ì
8
.
·
V
.
|
.
¢
0180
.
²
w
.
.
ß
.
C
7
6
.
\
8
n
r
þ
0190
ã
>
±
©
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 1570, Ack: 1670, Len: 372
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 372
- Sequence number: 1570 (relative sequence number)
- Acknowledgment number: 1670 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 376
- Calculated window size: 48128
- Window size scaling factor: 128
- Checksum: 0x019c [unverified]
- Urgent pointer: 0
- TCP payload (372 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): 88225679
- Encrypted Packet: 6ea21243be6552208e7bea984ea415595c806eaed93904d8...
- MAC: 03df07433736875c386e72fee33eb1a9
0000
00
16
b6
6e
d4
7f
de
f2
52
a3
af
3c
80
00
05
6a
0010
00
5c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
e4
66
a2
46
8c
94
79
65
2a
df
fd
65
d3
f6
54
9b
0030
f6
cc
1a
15
85
d5
26
88
92
a5
7e
ed
b4
89
a7
a1
0040
e5
72
a4
68
90
77
7b
c2
15
b0
44
00
c9
80
79
a2
0050
66
28
bf
9f
0000
.
.
¶
n
Ô
.
Þ
ò
R
£
¯
<
.
.
.
j
0010
.
\
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
ä
f
¢
F
.
.
y
e
*
ß
ý
e
Ó
ö
T
.
0030
ö
Ì
.
.
.
Õ
&
.
.
¥
~
í
´
.
§
¡
0040
å
r
¤
h
.
w
{
Â
.
°
D
.
É
.
y
¢
0050
f
(
¿
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 1670, Ack: 1942, Len: 52
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 52
- Sequence number: 1670 (relative sequence number)
- Acknowledgment number: 1942 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1386
- Calculated window size: 177408
- Window size scaling factor: 128
- Checksum: 0x005c [unverified]
- Urgent pointer: 0
- TCP payload (52 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): e466a246
- Encrypted Packet: 8c9479652adffd65d3f6549bf6cc1a1585d5268892a57eed...
- MAC: 90777bc215b04400c98079a26628bf9f
0000
b6
6e
00
16
52
a3
af
3c
d4
7f
df
26
80
00
01
78
0010
00
28
00
00
0000
¶
n
.
.
R
£
¯
<
Ô
.
ß
&
.
.
.
x
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 1942, Ack: 1722, Len: 0
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 1942 (relative sequence number)
- Acknowledgment number: 1722 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 376
- Calculated window size: 48128
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
b6
6e
00
16
52
a3
af
3c
d4
7f
df
26
80
00
01
78
0010
00
bc
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
56
f2
99
d7
fd
89
a7
42
4f
76
5c
60
6a
f6
3f
6a
0030
8b
95
f5
10
a8
d0
03
92
d8
cd
29
d8
03
8d
fa
79
0040
22
f2
02
99
1f
36
e0
dc
90
16
fb
3e
fe
14
45
1c
0050
af
da
6b
21
75
4b
1a
5b
1f
1c
2b
3a
57
cd
a0
ce
0060
04
17
9b
2f
dc
d0
e3
7b
09
3b
79
27
fc
46
1e
d3
0070
ff
18
4f
e4
dc
be
11
69
bd
5e
35
2c
b7
f8
bd
c9
0080
2d
5f
b5
19
bb
ef
59
32
a9
51
fb
11
22
05
c7
22
0090
7e
99
9d
ec
5f
e0
e4
70
3a
bf
68
18
4e
3f
bf
c3
00A0
c3
74
6a
4e
d3
c4
9f
f6
79
40
31
81
1d
6e
ba
d3
00B0
92
d1
86
f2
0000
¶
n
.
.
R
£
¯
<
Ô
.
ß
&
.
.
.
x
0010
.
¼
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
V
ò
.
×
ý
.
§
B
O
v
\
`
j
ö
?
j
0030
.
.
õ
.
¨
Ð
.
.
Ø
Í
)
Ø
.
.
ú
y
0040
"
ò
.
.
.
6
à
Ü
.
.
û
>
þ
.
E
.
0050
¯
Ú
k
!
u
K
.
[
.
.
+
:
W
Í
.
Î
0060
.
.
.
/
Ü
Ð
ã
{
.
;
y
'
ü
F
.
Ó
0070
ÿ
.
O
ä
Ü
¾
.
i
½
^
5
,
·
ø
½
É
0080
-
_
µ
.
»
ï
Y
2
©
Q
û
.
"
.
Ç
"
0090
~
.
.
ì
_
à
ä
p
:
¿
h
.
N
?
¿
Ã
00A0
Ã
t
j
N
Ó
Ä
.
ö
y
@
1
.
.
n
º
Ó
00B0
.
Ñ
.
ò
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 1942, Ack: 1722, Len: 148
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 148
- Sequence number: 1942 (relative sequence number)
- Acknowledgment number: 1722 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 376
- Calculated window size: 48128
- Window size scaling factor: 128
- Checksum: 0x00bc [unverified]
- Urgent pointer: 0
- TCP payload (148 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): 56f299d7
- Encrypted Packet: fd89a7424f765c606af63f6a8b95f510a8d00392d8cd29d8...
- MAC: d3c49ff6794031811d6ebad392d186f2
0000
00
16
b6
6e
d4
7f
df
26
52
a3
af
d0
80
00
05
7f
0010
00
44
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
c5
65
67
8e
bc
5c
b3
a3
44
3e
7b
94
52
d2
17
14
0030
71
45
e0
65
5e
21
38
2e
62
1b
8a
d2
0000
.
.
¶
n
Ô
.
ß
&
R
£
¯
Ð
.
.
.
.
0010
.
D
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
Å
e
g
.
¼
\
³
£
D
>
{
.
R
Ò
.
.
0030
q
E
à
e
^
!
8
.
b
.
.
Ò
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 1722, Ack: 2090, Len: 28
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 28
- Sequence number: 1722 (relative sequence number)
- Acknowledgment number: 2090 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1407
- Calculated window size: 180096
- Window size scaling factor: 128
- Checksum: 0x0044 [unverified]
- Urgent pointer: 0
- TCP payload (28 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): c565678e
- Encrypted Packet: bc5cb3a3443e7b94
- MAC: 52d217147145e0655e21382e621b8ad2
0000
b6
6e
00
16
52
a3
af
d0
d4
7f
df
42
80
00
01
78
0010
00
28
00
00
0000
¶
n
.
.
R
£
¯
Ð
Ô
.
ß
B
.
.
.
x
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 2090, Ack: 1750, Len: 0
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 2090 (relative sequence number)
- Acknowledgment number: 1750 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 376
- Calculated window size: 48128
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
b6
6e
00
16
52
a3
af
d0
d4
7f
df
42
80
00
01
78
0010
00
98
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
bb
f4
0a
fd
6c
8d
45
70
57
05
1c
fe
ba
1c
ca
b2
0030
09
e1
0d
9c
99
63
59
17
d8
e2
dd
f7
6c
ae
07
99
0040
e1
51
3a
cc
91
91
1f
c7
b3
7e
1f
79
c8
b3
12
0f
0050
11
0e
9c
c6
6d
0e
1f
3d
0b
b0
b4
56
ae
21
69
f8
0060
a4
7a
85
a9
a4
1f
ba
bb
e8
d0
b1
c1
b2
75
a6
69
0070
ff
74
99
b1
cd
28
53
d1
0d
12
ef
d5
25
be
00
63
0080
60
d7
42
bd
08
7d
4f
c8
f9
84
35
ce
54
f7
22
85
0000
¶
n
.
.
R
£
¯
Ð
Ô
.
ß
B
.
.
.
x
0010
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
»
ô
.
ý
l
.
E
p
W
.
.
þ
º
.
Ê
²
0030
.
á
.
.
.
c
Y
.
Ø
â
Ý
÷
l
®
.
.
0040
á
Q
:
Ì
.
.
.
Ç
³
~
.
y
È
³
.
.
0050
.
.
.
Æ
m
.
.
=
.
°
´
V
®
!
i
ø
0060
¤
z
.
©
¤
.
º
»
è
Ð
±
Á
²
u
¦
i
0070
ÿ
t
.
±
Í
(
S
Ñ
.
.
ï
Õ
%
¾
.
c
0080
`
×
B
½
.
}
O
È
ù
.
5
Î
T
÷
"
.
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 2090, Ack: 1750, Len: 112
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 112
- Sequence number: 2090 (relative sequence number)
- Acknowledgment number: 1750 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 376
- Calculated window size: 48128
- Window size scaling factor: 128
- Checksum: 0x0098 [unverified]
- Urgent pointer: 0
- TCP payload (112 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): bbf40afd
- Encrypted Packet: 6c8d457057051cfeba1ccab209e10d9c99635917d8e2ddf7...
- MAC: 60d742bd087d4fc8f98435ce54f72285
0000
00
16
b6
6e
d4
7f
df
42
52
a3
b0
40
80
00
05
7f
0010
00
28
00
00
0000
.
.
¶
n
Ô
.
ß
B
R
£
°
@
.
.
.
.
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 1750, Ack: 2202, Len: 0
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 0
- Sequence number: 1750 (relative sequence number)
- Acknowledgment number: 2202 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1407
- Calculated window size: 180096
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
b6
6e
d4
7f
df
42
52
a3
b0
40
80
00
05
7f
0010
03
dc
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
f5
49
d4
f1
28
19
83
ef
f5
27
3f
c8
8e
c8
bc
9b
0030
ba
fb
8a
97
aa
3e
42
4c
8f
97
82
10
3b
42
48
52
0040
81
73
ed
e4
ba
3c
23
71
0b
c9
e6
f2
46
6d
d6
7a
0050
02
84
79
ef
d2
c0
b6
d3
b4
e5
4b
94
6d
7c
8a
ef
0060
ea
4d
e9
27
91
15
91
14
5d
94
23
30
d4
f4
54
af
0070
29
e2
06
d8
ba
e8
67
e0
cc
6d
c3
77
22
88
c6
19
0080
a5
e2
52
73
e1
9b
6b
8d
7a
09
71
ea
78
9e
2f
cc
0090
72
fb
b8
33
e3
b9
2f
5a
ba
8d
47
78
b9
03
ea
5c
00A0
9a
af
1f
36
82
a9
22
81
85
b5
98
b8
ad
ca
9d
7f
00B0
b3
b2
0e
ff
73
ab
27
1a
a6
72
fc
44
3d
ab
34
ee
00C0
b1
e4
c6
e1
2c
f3
2f
cc
00
a6
c3
44
f1
28
ea
cd
00D0
da
77
dd
22
56
cb
3f
68
b8
09
34
f4
72
b1
52
42
00E0
c1
41
ce
c4
6e
6f
36
24
67
31
80
17
5f
68
65
8a
00F0
66
b0
31
5c
c5
97
d3
66
ae
a3
42
39
a3
4f
d2
91
0100
c0
6d
a6
a9
d7
54
43
76
6c
c6
20
0f
65
22
49
4d
0110
c1
b4
c5
43
84
03
ab
f7
83
3f
3a
54
3f
8b
1d
dd
0120
77
fa
32
dd
1d
da
3c
ad
6a
39
b4
76
5c
23
5f
88
0130
fc
4c
c6
3c
80
5d
72
63
59
9e
37
e2
31
94
c0
b5
0140
01
b5
c8
c7
5f
40
cf
d2
7d
a8
18
eb
02
7b
ab
29
0150
3a
6f
09
84
8b
40
67
ac
14
ea
50
26
6d
f0
ed
e0
0160
ba
35
f7
40
cc
09
b9
f4
38
39
d6
2a
5d
5b
77
c1
0170
98
4c
39
b4
55
54
f9
a9
ad
9c
fd
b8
6a
2b
2c
dc
0180
cd
8e
01
52
95
a7
fe
80
eb
5f
0d
f7
7b
5b
3d
88
0190
46
6c
a2
25
0e
a8
74
91
85
40
60
11
8b
5c
1e
c4
01A0
88
ed
2f
34
11
4c
2f
1a
d6
8b
24
5f
bc
5e
3d
34
01B0
1d
71
91
66
69
9e
1d
82
b7
93
06
fe
f9
df
f8
25
01C0
1b
a9
e0
50
89
94
80
83
4a
13
5e
55
04
b5
c7
46
01D0
e6
c6
40
e3
5c
ae
f8
39
4a
88
94
81
b7
5d
50
0e
01E0
d1
b8
f3
40
0e
0d
0b
2f
5b
89
7c
64
0d
e1
54
63
01F0
e6
51
60
af
cb
7f
d2
fb
13
71
d9
b5
e2
00
b5
a6
0200
47
24
82
23
d1
14
01
89
8d
7a
d7
48
a4
aa
5a
ff
0210
84
8f
c7
47
3c
41
d1
1d
fb
4f
13
55
4f
c7
b5
5b
0220
cd
9f
fa
f0
01
fa
46
69
5e
41
be
89
fb
de
f1
83
0230
bf
63
9c
de
48
f1
a1
d8
62
8f
48
89
5e
14
f0
ba
0240
4b
f0
c4
0d
4b
d9
46
8f
f2
87
c6
bd
8a
a3
55
e1
0250
b8
b3
07
46
75
b8
00
cf
d3
37
3a
f9
a8
ee
2f
d7
0260
da
86
ab
28
3c
dd
11
91
95
c5
1e
12
45
f7
75
76
0270
8f
44
e2
2a
84
9f
cf
3e
ec
6c
b7
8c
c6
03
a4
d5
0280
b6
e0
89
bc
70
53
03
b0
35
f7
8c
d3
5c
00
c4
9f
0290
2f
30
b1
42
0b
2e
ae
c0
12
52
20
40
7e
2a
f1
3c
02A0
5a
5a
2e
08
ef
4f
48
88
fa
3a
46
31
2a
cd
19
52
02B0
5c
eb
9f
3b
9e
50
17
a3
f9
ff
0a
23
7e
2c
48
66
02C0
d6
59
3c
06
06
01
d9
b5
5d
39
8c
d3
93
30
ad
85
02D0
91
e1
cc
2e
35
23
1d
ea
a3
b7
90
8f
b0
8e
ba
48
02E0
39
83
30
7e
4c
8f
f5
7c
ec
33
80
2b
5f
0d
3a
34
02F0
8c
fd
fd
af
1c
7b
e1
16
1d
d0
1e
6b
d0
61
51
42
0300
e8
5f
ec
40
6a
03
7b
f7
3f
89
0b
a6
c6
d0
43
9c
0310
3c
33
26
ee
0b
eb
73
4b
6a
52
8e
2b
87
59
27
79
0320
15
da
b8
3b
b7
d2
01
2b
30
c1
08
ae
cf
31
cc
84
0330
d2
0d
60
1f
32
e7
08
62
3b
0a
5b
9d
99
33
93
f1
0340
c4
bc
cc
6c
64
ab
3e
80
dd
15
3e
6a
26
4e
e5
f7
0350
02
ce
dd
39
97
7a
b3
68
4e
a6
50
6a
6e
0a
ed
fd
0360
77
4d
7f
d7
95
f0
ef
0e
77
64
15
8b
68
ca
4b
70
0370
5c
8c
c3
ce
90
9d
f1
f2
4e
74
c1
b1
3f
60
cd
e8
0380
7a
fe
a9
53
6e
ca
b8
f2
b6
57
27
31
34
38
9b
7b
0390
85
c1
68
3d
ea
3e
99
18
b6
b4
9a
0f
26
0c
69
e8
03A0
2a
dd
8d
05
9a
4e
6d
ed
c9
69
8e
01
95
b9
69
20
03B0
55
6c
38
cd
1c
d7
82
3d
fd
40
0f
13
65
8c
7e
c0
03C0
f5
f9
2a
d1
76
9d
c3
41
58
59
8e
1c
ed
6d
2f
d0
03D0
22
b1
94
3d
0000
.
.
¶
n
Ô
.
ß
B
R
£
°
@
.
.
.
.
0010
.
Ü
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
õ
I
Ô
ñ
(
.
.
ï
õ
'
?
È
.
È
¼
.
0030
º
û
.
.
ª
>
B
L
.
.
.
.
;
B
H
R
0040
.
s
í
ä
º
<
#
q
.
É
æ
ò
F
m
Ö
z
0050
.
.
y
ï
Ò
À
¶
Ó
´
å
K
.
m
|
.
ï
0060
ê
M
é
'
.
.
.
.
]
.
#
0
Ô
ô
T
¯
0070
)
â
.
Ø
º
è
g
à
Ì
m
Ã
w
"
.
Æ
.
0080
¥
â
R
s
á
.
k
.
z
.
q
ê
x
.
/
Ì
0090
r
û
¸
3
ã
¹
/
Z
º
.
G
x
¹
.
ê
\
00A0
.
¯
.
6
.
©
"
.
.
µ
.
¸
.
Ê
.
.
00B0
³
²
.
ÿ
s
«
'
.
¦
r
ü
D
=
«
4
î
00C0
±
ä
Æ
á
,
ó
/
Ì
.
¦
Ã
D
ñ
(
ê
Í
00D0
Ú
w
Ý
"
V
Ë
?
h
¸
.
4
ô
r
±
R
B
00E0
Á
A
Î
Ä
n
o
6
$
g
1
.
.
_
h
e
.
00F0
f
°
1
\
Å
.
Ó
f
®
£
B
9
£
O
Ò
.
0100
À
m
¦
©
×
T
C
v
l
Æ
.
e
"
I
M
0110
Á
´
Å
C
.
.
«
÷
.
?
:
T
?
.
.
Ý
0120
w
ú
2
Ý
.
Ú
<
.
j
9
´
v
\
#
_
.
0130
ü
L
Æ
<
.
]
r
c
Y
.
7
â
1
.
À
µ
0140
.
µ
È
Ç
_
@
Ï
Ò
}
¨
.
ë
.
{
«
)
0150
:
o
.
.
.
@
g
¬
.
ê
P
&
m
ð
í
à
0160
º
5
÷
@
Ì
.
¹
ô
8
9
Ö
*
]
[
w
Á
0170
.
L
9
´
U
T
ù
©
.
.
ý
¸
j
+
,
Ü
0180
Í
.
.
R
.
§
þ
.
ë
_
.
÷
{
[
=
.
0190
F
l
¢
%
.
¨
t
.
.
@
`
.
.
\
.
Ä
01A0
.
í
/
4
.
L
/
.
Ö
.
$
_
¼
^
=
4
01B0
.
q
.
f
i
.
.
.
·
.
.
þ
ù
ß
ø
%
01C0
.
©
à
P
.
.
.
.
J
.
^
U
.
µ
Ç
F
01D0
æ
Æ
@
ã
\
®
ø
9
J
.
.
.
·
]
P
.
01E0
Ñ
¸
ó
@
.
.
.
/
[
.
|
d
.
á
T
c
01F0
æ
Q
`
¯
Ë
.
Ò
û
.
q
Ù
µ
â
.
µ
¦
0200
G
$
.
#
Ñ
.
.
.
.
z
×
H
¤
ª
Z
ÿ
0210
.
.
Ç
G
<
A
Ñ
.
û
O
.
U
O
Ç
µ
[
0220
Í
.
ú
ð
.
ú
F
i
^
A
¾
.
û
Þ
ñ
.
0230
¿
c
.
Þ
H
ñ
¡
Ø
b
.
H
.
^
.
ð
º
0240
K
ð
Ä
.
K
Ù
F
.
ò
.
Æ
½
.
£
U
á
0250
¸
³
.
F
u
¸
.
Ï
Ó
7
:
ù
¨
î
/
×
0260
Ú
.
«
(
<
Ý
.
.
.
Å
.
.
E
÷
u
v
0270
.
D
â
*
.
.
Ï
>
ì
l
·
.
Æ
.
¤
Õ
0280
¶
à
.
¼
p
S
.
°
5
÷
.
Ó
\
.
Ä
.
0290
/
0
±
B
.
.
®
À
.
R
@
~
*
ñ
<
02A0
Z
Z
.
.
ï
O
H
.
ú
:
F
1
*
Í
.
R
02B0
\
ë
.
;
.
P
.
£
ù
ÿ
.
#
~
,
H
f
02C0
Ö
Y
<
.
.
.
Ù
µ
]
9
.
Ó
.
0
.
.
02D0
.
á
Ì
.
5
#
.
ê
£
·
.
.
°
.
º
H
02E0
9
.
0
~
L
.
õ
|
ì
3
.
+
_
.
:
4
02F0
.
ý
ý
¯
.
{
á
.
.
Ð
.
k
Ð
a
Q
B
0300
è
_
ì
@
j
.
{
÷
?
.
.
¦
Æ
Ð
C
.
0310
<
3
&
î
.
ë
s
K
j
R
.
+
.
Y
'
y
0320
.
Ú
¸
;
·
Ò
.
+
0
Á
.
®
Ï
1
Ì
.
0330
Ò
.
`
.
2
ç
.
b
;
.
[
.
.
3
.
ñ
0340
Ä
¼
Ì
l
d
«
>
.
Ý
.
>
j
&
N
å
÷
0350
.
Î
Ý
9
.
z
³
h
N
¦
P
j
n
.
í
ý
0360
w
M
.
×
.
ð
ï
.
w
d
.
.
h
Ê
K
p
0370
\
.
Ã
Î
.
.
ñ
ò
N
t
Á
±
?
`
Í
è
0380
z
þ
©
S
n
Ê
¸
ò
¶
W
'
1
4
8
.
{
0390
.
Á
h
=
ê
>
.
.
¶
´
.
.
&
.
i
è
03A0
*
Ý
.
.
.
N
m
í
É
i
.
.
.
¹
i
03B0
U
l
8
Í
.
×
.
=
ý
@
.
.
e
.
~
À
03C0
õ
ù
*
Ñ
v
.
Ã
A
X
Y
.
.
í
m
/
Ð
03D0
"
±
.
=
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 1750, Ack: 2202, Len: 948
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 948
- Sequence number: 1750 (relative sequence number)
- Acknowledgment number: 2202 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1407
- Calculated window size: 180096
- Window size scaling factor: 128
- Checksum: 0x03dc [unverified]
- Urgent pointer: 0
- TCP payload (948 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): f549d4f1
- Encrypted Packet: 281983eff5273fc88ec8bc9bbafb8a97aa3e424c8f978210...
- MAC: 769dc34158598e1ced6d2fd022b1943d
0000
b6
6e
00
16
52
a3
b0
40
d4
7f
e2
f6
80
00
01
88
0010
00
28
00
00
0000
¶
n
.
.
R
£
°
@
Ô
.
â
ö
.
.
.
.
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 2202, Ack: 2698, Len: 0
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 2202 (relative sequence number)
- Acknowledgment number: 2698 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 392
- Calculated window size: 50176
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
b6
6e
d4
7f
e2
f6
52
a3
b0
40
80
00
05
7f
0010
00
4c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
39
20
ce
b0
81
d7
35
93
a0
6a
48
18
50
5f
38
ff
0030
bd
dd
04
88
d9
e3
8b
58
c4
cc
1f
25
0a
e7
21
7d
0040
04
9f
e8
97
0000
.
.
¶
n
Ô
.
â
ö
R
£
°
@
.
.
.
.
0010
.
L
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
9
Î
°
.
×
5
.
.
j
H
.
P
_
8
ÿ
0030
½
Ý
.
.
Ù
ã
.
X
Ä
Ì
.
%
.
ç
!
}
0040
.
.
è
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 2698, Ack: 2202, Len: 36
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 36
- Sequence number: 2698 (relative sequence number)
- Acknowledgment number: 2202 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1407
- Calculated window size: 180096
- Window size scaling factor: 128
- Checksum: 0x004c [unverified]
- Urgent pointer: 0
- TCP payload (36 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): 3920ceb0
- Encrypted Packet: 81d73593a06a4818505f38ffbddd0488
- MAC: d9e38b58c4cc1f250ae7217d049fe897
0000
b6
6e
00
16
52
a3
b0
40
d4
7f
e3
1a
80
00
01
88
0010
00
28
00
00
0000
¶
n
.
.
R
£
°
@
Ô
.
ã
.
.
.
.
.
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 2202, Ack: 2734, Len: 0
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 2202 (relative sequence number)
- Acknowledgment number: 2734 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 392
- Calculated window size: 50176
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
b6
6e
00
16
52
a3
b0
40
d4
7f
e3
1a
80
00
01
88
0010
02
f0
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
d2
49
14
67
eb
3f
b2
b1
5e
54
d7
9e
25
c5
4b
94
0030
cb
6b
6f
72
ff
95
df
ac
93
4a
a3
ae
95
11
da
a4
0040
81
aa
c8
26
3e
c8
27
8a
f8
2a
58
bc
49
e7
09
dd
0050
9b
05
c1
f4
c4
de
d7
41
91
4e
b8
98
60
38
66
4c
0060
2f
45
85
dd
2e
fd
0b
b4
a1
64
d4
52
25
e5
bd
cf
0070
82
19
97
70
ac
56
76
af
6f
98
11
d3
b1
37
3e
80
0080
dd
2a
a2
4b
29
23
b0
7e
12
3f
ce
83
05
11
8a
cb
0090
aa
83
8e
f8
76
b2
a7
0e
13
64
a7
f6
21
d4
72
9c
00A0
61
6d
44
78
d8
ca
b1
92
c5
a3
b5
c4
ad
60
48
a4
00B0
77
0e
45
12
74
87
08
69
5e
f9
61
09
a6
80
19
cb
00C0
0f
d0
07
24
fe
f8
28
bd
a5
4e
c0
a7
60
2e
96
30
00D0
cb
c0
4e
7d
0b
73
0a
7f
56
6a
2a
73
b6
c1
b2
a0
00E0
0e
2d
cf
c6
ce
f1
88
1f
f3
47
11
15
02
4d
50
9e
00F0
7e
34
4d
58
9b
fc
64
0c
15
86
cc
7b
8e
1b
e1
35
0100
c9
6d
e7
0b
37
d2
7d
44
21
43
6d
45
10
fa
38
06
0110
97
55
d1
e8
4f
9a
54
bb
9d
c0
ce
a0
3a
d1
c1
1d
0120
d1
cf
93
1e
59
90
5d
7e
15
d5
1a
eb
89
2f
ee
cd
0130
d0
ba
19
21
67
4f
d6
f0
13
29
d5
ad
b6
1b
5e
98
0140
b0
a2
c7
93
e7
ce
d0
bd
e2
f4
8e
45
64
31
b7
1e
0150
f7
c9
4f
d8
a1
fd
e0
bd
d4
95
51
b2
43
52
58
9c
0160
d4
08
f8
7d
b1
0a
c0
43
1a
6c
4b
08
d6
03
74
ea
0170
c1
ca
79
74
08
37
9c
2a
d9
be
d9
da
0a
46
50
35
0180
cb
8d
5e
d4
fc
f5
d7
58
92
92
0a
7a
3e
ba
6b
03
0190
43
4b
ad
70
b2
1d
66
6c
a4
a3
0e
39
90
e4
3f
bf
01A0
94
26
0e
7a
ca
31
0a
14
04
f2
6d
fa
3c
8d
e2
f0
01B0
0d
83
0e
2a
66
08
f9
ab
49
18
e2
d1
01
6a
42
de
01C0
c8
0b
71
4e
22
08
d8
5f
99
40
99
47
03
6c
fe
89
01D0
f0
f0
1d
8f
ba
11
d9
aa
da
47
bd
a4
1f
c8
59
b3
01E0
60
9c
18
07
96
5b
fc
42
ac
eb
50
7b
15
c6
47
76
01F0
dd
d7
75
e2
14
5c
93
8a
53
52
11
9a
42
08
f8
96
0200
65
c9
dd
ee
0e
23
ae
bf
a8
73
d9
c4
2f
72
79
2e
0210
2d
51
e3
aa
60
5d
31
52
d4
a7
8e
be
2e
f9
1c
76
0220
48
80
db
15
d3
32
9f
aa
e8
31
c6
79
4b
81
70
18
0230
3e
a7
68
f3
47
5c
6b
cb
ee
5f
e4
45
91
e5
2f
a2
0240
af
99
0b
2c
ef
da
a8
5b
34
ec
ca
d2
b1
ba
7d
56
0250
a2
0c
85
cd
84
f1
6c
b8
cc
65
86
bd
d9
19
37
f8
0260
30
5c
80
ba
48
f4
da
60
22
fe
64
56
b9
a3
cd
22
0270
53
b5
05
1a
e3
a3
01
a9
d9
b5
85
5d
5a
d8
5a
1b
0280
14
7f
04
2f
51
bb
0e
35
ca
6b
17
56
f4
18
2b
1b
0290
f7
37
d5
14
c8
d8
1c
fb
24
2c
cd
0d
b1
9a
b2
13
02A0
de
16
8c
6f
e0
0d
de
27
c1
43
1a
ee
ca
70
e9
59
02B0
90
bf
a4
dc
8d
a5
0c
ae
9c
60
0e
53
a9
20
a9
9b
02C0
62
17
e4
c0
dc
6f
83
f4
32
6a
7c
f7
da
79
bf
08
02D0
02
5a
59
50
6e
b6
fa
70
a8
9b
93
01
16
3a
0b
c4
02E0
bf
23
c7
d7
c4
eb
09
2f
0000
¶
n
.
.
R
£
°
@
Ô
.
ã
.
.
.
.
.
0010
.
ð
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
Ò
I
.
g
ë
?
²
±
^
T
×
.
%
Å
K
.
0030
Ë
k
o
r
ÿ
.
ß
¬
.
J
£
®
.
.
Ú
¤
0040
.
ª
È
&
>
È
'
.
ø
*
X
¼
I
ç
.
Ý
0050
.
.
Á
ô
Ä
Þ
×
A
.
N
¸
.
`
8
f
L
0060
/
E
.
Ý
.
ý
.
´
¡
d
Ô
R
%
å
½
Ï
0070
.
.
.
p
¬
V
v
¯
o
.
.
Ó
±
7
>
.
0080
Ý
*
¢
K
)
#
°
~
.
?
Î
.
.
.
.
Ë
0090
ª
.
.
ø
v
²
§
.
.
d
§
ö
!
Ô
r
.
00A0
a
m
D
x
Ø
Ê
±
.
Å
£
µ
Ä
.
`
H
¤
00B0
w
.
E
.
t
.
.
i
^
ù
a
.
¦
.
.
Ë
00C0
.
Ð
.
$
þ
ø
(
½
¥
N
À
§
`
.
.
0
00D0
Ë
À
N
}
.
s
.
.
V
j
*
s
¶
Á
²
.
00E0
.
-
Ï
Æ
Î
ñ
.
.
ó
G
.
.
.
M
P
.
00F0
~
4
M
X
.
ü
d
.
.
.
Ì
{
.
.
á
5
0100
É
m
ç
.
7
Ò
}
D
!
C
m
E
.
ú
8
.
0110
.
U
Ñ
è
O
.
T
»
.
À
Î
.
:
Ñ
Á
.
0120
Ñ
Ï
.
.
Y
.
]
~
.
Õ
.
ë
.
/
î
Í
0130
Ð
º
.
!
g
O
Ö
ð
.
)
Õ
.
¶
.
^
.
0140
°
¢
Ç
.
ç
Î
Ð
½
â
ô
.
E
d
1
·
.
0150
÷
É
O
Ø
¡
ý
à
½
Ô
.
Q
²
C
R
X
.
0160
Ô
.
ø
}
±
.
À
C
.
l
K
.
Ö
.
t
ê
0170
Á
Ê
y
t
.
7
.
*
Ù
¾
Ù
Ú
.
F
P
5
0180
Ë
.
^
Ô
ü
õ
×
X
.
.
.
z
>
º
k
.
0190
C
K
.
p
²
.
f
l
¤
£
.
9
.
ä
?
¿
01A0
.
&
.
z
Ê
1
.
.
.
ò
m
ú
<
.
â
ð
01B0
.
.
.
*
f
.
ù
«
I
.
â
Ñ
.
j
B
Þ
01C0
È
.
q
N
"
.
Ø
_
.
@
.
G
.
l
þ
.
01D0
ð
ð
.
.
º
.
Ù
ª
Ú
G
½
¤
.
È
Y
³
01E0
`
.
.
.
.
[
ü
B
¬
ë
P
{
.
Æ
G
v
01F0
Ý
×
u
â
.
\
.
.
S
R
.
.
B
.
ø
.
0200
e
É
Ý
î
.
#
®
¿
¨
s
Ù
Ä
/
r
y
.
0210
-
Q
ã
ª
`
]
1
R
Ô
§
.
¾
.
ù
.
v
0220
H
.
Û
.
Ó
2
.
ª
è
1
Æ
y
K
.
p
.
0230
>
§
h
ó
G
\
k
Ë
î
_
ä
E
.
å
/
¢
0240
¯
.
.
,
ï
Ú
¨
[
4
ì
Ê
Ò
±
º
}
V
0250
¢
.
.
Í
.
ñ
l
¸
Ì
e
.
½
Ù
.
7
ø
0260
0
\
.
º
H
ô
Ú
`
"
þ
d
V
¹
£
Í
"
0270
S
µ
.
.
ã
£
.
©
Ù
µ
.
]
Z
Ø
Z
.
0280
.
.
.
/
Q
»
.
5
Ê
k
.
V
ô
.
+
.
0290
÷
7
Õ
.
È
Ø
.
û
$
,
Í
.
±
.
²
.
02A0
Þ
.
.
o
à
.
Þ
'
Á
C
.
î
Ê
p
é
Y
02B0
.
¿
¤
Ü
.
¥
.
®
.
`
.
S
©
©
.
02C0
b
.
ä
À
Ü
o
.
ô
2
j
|
÷
Ú
y
¿
.
02D0
.
Z
Y
P
n
¶
ú
p
¨
.
.
.
.
:
.
Ä
02E0
¿
#
Ç
×
Ä
ë
.
/
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 2202, Ack: 2734, Len: 712
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 712
- Sequence number: 2202 (relative sequence number)
- Acknowledgment number: 2734 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 392
- Calculated window size: 50176
- Window size scaling factor: 128
- Checksum: 0x02f0 [unverified]
- Urgent pointer: 0
- TCP payload (712 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): d2491467
- Encrypted Packet: eb3fb2b15e54d79e25c54b94cb6b6f72ff95dfac934aa3ae...
- MAC: a89b9301163a0bc4bf23c7d7c4eb092f
0000
00
16
b6
6e
d4
7f
e3
1a
52
a3
b3
08
80
00
05
94
0010
00
28
00
00
0000
.
.
¶
n
Ô
.
ã
.
R
£
³
.
.
.
.
.
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 2734, Ack: 2914, Len: 0
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 0
- Sequence number: 2734 (relative sequence number)
- Acknowledgment number: 2914 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1428
- Calculated window size: 182784
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
b6
6e
d4
7f
e3
1a
52
a3
b3
08
80
00
05
94
0010
00
94
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
cb
18
9c
a9
8c
e4
03
aa
bd
6f
f2
99
e0
e5
00
d8
0030
fd
3d
37
d9
85
c7
0f
21
d1
d3
60
99
90
83
5c
1f
0040
1f
2f
c3
54
da
45
21
94
b1
cf
c6
1b
1d
43
c0
e5
0050
eb
e2
ca
2c
bd
e4
0a
3c
ca
5a
3e
c0
eb
02
41
bb
0060
18
1d
9a
c2
9e
74
06
75
dd
4e
fb
a4
37
2b
aa
57
0070
f1
d9
1c
df
89
db
a8
3a
be
22
7c
5b
43
ff
fd
6a
0080
2c
fb
2a
e7
61
b8
9a
33
37
3b
25
28
0000
.
.
¶
n
Ô
.
ã
.
R
£
³
.
.
.
.
.
0010
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
Ë
.
.
©
.
ä
.
ª
½
o
ò
.
à
å
.
Ø
0030
ý
=
7
Ù
.
Ç
.
!
Ñ
Ó
`
.
.
.
\
.
0040
.
/
Ã
T
Ú
E
!
.
±
Ï
Æ
.
.
C
À
å
0050
ë
â
Ê
,
½
ä
.
<
Ê
Z
>
À
ë
.
A
»
0060
.
.
.
Â
.
t
.
u
Ý
N
û
¤
7
+
ª
W
0070
ñ
Ù
.
ß
.
Û
¨
:
¾
"
|
[
C
ÿ
ý
j
0080
,
û
*
ç
a
¸
.
3
7
;
%
(
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 2734, Ack: 2914, Len: 108
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 108
- Sequence number: 2734 (relative sequence number)
- Acknowledgment number: 2914 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1428
- Calculated window size: 182784
- Window size scaling factor: 128
- Checksum: 0x0094 [unverified]
- Urgent pointer: 0
- TCP payload (108 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): cb189ca9
- Encrypted Packet: 8ce403aabd6ff299e0e500d8fd3d37d985c70f21d1d36099...
- MAC: 43fffd6a2cfb2ae761b89a33373b2528
0000
00
16
b6
6e
d4
7f
e3
86
52
a3
b3
08
80
00
05
94
0010
00
ec
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
b6
a5
b1
3b
ed
21
d5
60
40
a5
85
89
19
6e
4b
c2
0030
a8
e2
89
5b
c2
e4
bd
bd
04
04
31
eb
1d
03
89
ba
0040
e9
b2
77
0e
9c
c8
10
97
6a
93
0d
35
92
f1
2e
53
0050
93
90
b2
de
72
8d
70
a4
da
fc
3d
23
58
22
2b
fd
0060
3f
11
21
2a
06
92
60
70
02
a5
c9
ae
39
44
4e
60
0070
ea
cd
4f
00
0b
dc
2f
3b
f7
b5
28
5f
fb
bf
ae
c2
0080
04
e9
d1
46
b1
28
75
a6
e7
2d
5b
bc
b8
2a
01
fe
0090
7a
14
01
e8
3f
d7
47
7d
a5
e2
fb
dd
38
12
12
a2
00A0
bb
1b
2a
1d
2d
cd
55
7b
de
34
3b
8e
c6
74
23
1d
00B0
8b
04
5a
6c
9d
13
8f
59
19
e8
20
df
6e
08
39
a9
00C0
dd
d2
b2
ee
37
c8
79
e4
c3
e3
77
03
f1
5c
b0
6d
00D0
f3
c8
e9
10
a3
88
25
0c
d3
ce
e1
ac
1a
1a
44
10
00E0
bb
24
24
4b
0000
.
.
¶
n
Ô
.
ã
.
R
£
³
.
.
.
.
.
0010
.
ì
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
¶
¥
±
;
í
!
Õ
`
@
¥
.
.
.
n
K
Â
0030
¨
â
.
[
Â
ä
½
½
.
.
1
ë
.
.
.
º
0040
é
²
w
.
.
È
.
.
j
.
.
5
.
ñ
.
S
0050
.
.
²
Þ
r
.
p
¤
Ú
ü
=
#
X
"
+
ý
0060
?
.
!
*
.
.
`
p
.
¥
É
®
9
D
N
`
0070
ê
Í
O
.
.
Ü
/
;
÷
µ
(
_
û
¿
®
Â
0080
.
é
Ñ
F
±
(
u
¦
ç
-
[
¼
¸
*
.
þ
0090
z
.
.
è
?
×
G
}
¥
â
û
Ý
8
.
.
¢
00A0
»
.
*
.
-
Í
U
{
Þ
4
;
.
Æ
t
#
.
00B0
.
.
Z
l
.
.
.
Y
.
è
ß
n
.
9
©
00C0
Ý
Ò
²
î
7
È
y
ä
Ã
ã
w
.
ñ
\
°
m
00D0
ó
È
é
.
£
.
%
.
Ó
Î
á
¬
.
.
D
.
00E0
»
$
$
K
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 2842, Ack: 2914, Len: 196
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 196
- Sequence number: 2842 (relative sequence number)
- Acknowledgment number: 2914 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1428
- Calculated window size: 182784
- Window size scaling factor: 128
- Checksum: 0x00ec [unverified]
- Urgent pointer: 0
- TCP payload (196 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): b6a5b13b
- Encrypted Packet: ed21d56040a58589196e4bc2a8e2895bc2e4bdbd040431eb...
- MAC: a388250cd3cee1ac1a1a4410bb24244b
0000
b6
6e
00
16
52
a3
b3
08
d4
7f
e4
4a
80
00
01
99
0010
00
28
00
00
0000
¶
n
.
.
R
£
³
.
Ô
.
ä
J
.
.
.
.
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 2914, Ack: 3038, Len: 0
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 2914 (relative sequence number)
- Acknowledgment number: 3038 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 409
- Calculated window size: 52352
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
b6
6e
d4
7f
e4
4a
52
a3
b3
08
80
00
05
94
0010
01
2c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
d6
7e
f1
e3
e8
8a
58
bd
cb
f3
86
f9
dd
5d
e9
48
0030
a6
d9
18
69
22
fb
6b
19
09
57
89
da
d2
61
4b
05
0040
57
4a
0b
54
1f
dd
fd
01
4c
56
f0
db
62
c8
55
f2
0050
e1
58
77
c1
e4
d8
aa
76
35
09
8a
8c
d5
8f
77
48
0060
9d
44
10
c2
d4
6c
55
80
ac
87
09
57
8e
39
3a
36
0070
8b
0b
b6
0a
04
66
23
67
ff
bb
dd
bf
1b
3a
5d
89
0080
80
82
58
41
e4
10
d4
29
80
ba
e2
ba
d3
f4
07
67
0090
c9
67
29
58
99
12
ef
ac
2f
58
1b
97
fd
d7
fd
f9
00A0
ba
97
12
31
4e
b0
8e
da
9b
bd
dc
09
ac
aa
2d
0b
00B0
9b
41
a9
39
90
41
4f
3b
29
3d
32
d8
68
01
60
f1
00C0
1d
42
88
b5
22
6b
09
ea
72
f1
a0
02
f1
e0
e0
b8
00D0
51
64
67
63
9a
01
e4
0f
5d
7b
21
d3
55
f1
e5
eb
00E0
22
07
11
7d
86
d3
9c
99
fe
83
39
c3
b8
e1
9d
1e
00F0
bd
67
59
cb
79
ed
86
52
b0
b6
5e
30
36
20
a8
99
0100
d8
a1
aa
90
d3
de
1a
e6
e4
ed
90
ac
30
25
2e
19
0110
7a
d7
1e
39
bc
02
52
5e
dc
60
02
51
b4
4a
99
36
0120
7b
7e
30
1c
0000
.
.
¶
n
Ô
.
ä
J
R
£
³
.
.
.
.
.
0010
.
,
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
Ö
~
ñ
ã
è
.
X
½
Ë
ó
.
ù
Ý
]
é
H
0030
¦
Ù
.
i
"
û
k
.
.
W
.
Ú
Ò
a
K
.
0040
W
J
.
T
.
Ý
ý
.
L
V
ð
Û
b
È
U
ò
0050
á
X
w
Á
ä
Ø
ª
v
5
.
.
.
Õ
.
w
H
0060
.
D
.
Â
Ô
l
U
.
¬
.
.
W
.
9
:
6
0070
.
.
¶
.
.
f
#
g
ÿ
»
Ý
¿
.
:
]
.
0080
.
.
X
A
ä
.
Ô
)
.
º
â
º
Ó
ô
.
g
0090
É
g
)
X
.
.
ï
¬
/
X
.
.
ý
×
ý
ù
00A0
º
.
.
1
N
°
.
Ú
.
½
Ü
.
¬
ª
-
.
00B0
.
A
©
9
.
A
O
;
)
=
2
Ø
h
.
`
ñ
00C0
.
B
.
µ
"
k
.
ê
r
ñ
.
.
ñ
à
à
¸
00D0
Q
d
g
c
.
.
ä
.
]
{
!
Ó
U
ñ
å
ë
00E0
"
.
.
}
.
Ó
.
.
þ
.
9
Ã
¸
á
.
.
00F0
½
g
Y
Ë
y
í
.
R
°
¶
^
0
6
¨
.
0100
Ø
¡
ª
.
Ó
Þ
.
æ
ä
í
.
¬
0
%
.
.
0110
z
×
.
9
¼
.
R
^
Ü
`
.
Q
´
J
.
6
0120
{
~
0
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 3038, Ack: 2914, Len: 260
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 260
- Sequence number: 3038 (relative sequence number)
- Acknowledgment number: 2914 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1428
- Calculated window size: 182784
- Window size scaling factor: 128
- Checksum: 0x012c [unverified]
- Urgent pointer: 0
- TCP payload (260 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): d67ef1e3
- Encrypted Packet: e88a58bdcbf386f9dd5de948a6d9186922fb6b19095789da...
- MAC: bc02525edc600251b44a99367b7e301c
0000
b6
6e
00
16
52
a3
b3
08
d4
7f
e5
4e
80
00
01
aa
0010
00
28
00
00
0000
¶
n
.
.
R
£
³
.
Ô
.
å
N
.
.
.
ª
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 2914, Ack: 3298, Len: 0
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 2914 (relative sequence number)
- Acknowledgment number: 3298 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 426
- Calculated window size: 54528
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
b6
6e
d4
7f
e5
4e
52
a3
b3
08
80
00
05
94
0010
00
7c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
48
82
a1
b5
21
83
c3
16
af
1f
a9
56
76
e2
9b
0c
0030
4d
af
ec
d9
9a
6c
7a
5f
a1
0f
26
18
2a
9a
d1
af
0040
d8
2d
a8
06
af
2a
8d
6b
88
a8
03
89
59
25
23
3c
0050
8f
a3
b2
3f
e3
0b
c5
a7
c2
7c
c7
db
9d
74
cc
ff
0060
c7
7c
2e
59
48
b5
16
2a
76
b8
80
bf
37
16
b0
00
0070
00
41
02
ff
0000
.
.
¶
n
Ô
.
å
N
R
£
³
.
.
.
.
.
0010
.
|
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
H
.
¡
µ
!
.
Ã
.
¯
.
©
V
v
â
.
.
0030
M
¯
ì
Ù
.
l
z
_
¡
.
&
.
*
.
Ñ
¯
0040
Ø
-
¨
.
¯
*
.
k
.
¨
.
.
Y
%
#
<
0050
.
£
²
?
ã
.
Å
§
Â
|
Ç
Û
.
t
Ì
ÿ
0060
Ç
|
.
Y
H
µ
.
*
v
¸
.
¿
7
.
°
.
0070
.
A
.
ÿ
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 3298, Ack: 2914, Len: 84
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 84
- Sequence number: 3298 (relative sequence number)
- Acknowledgment number: 2914 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1428
- Calculated window size: 182784
- Window size scaling factor: 128
- Checksum: 0x007c [unverified]
- Urgent pointer: 0
- TCP payload (84 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): 4882a1b5
- Encrypted Packet: 2183c316af1fa95676e29b0c4dafecd99a6c7a5fa10f2618...
- MAC: 48b5162a76b880bf3716b000004102ff
0000
b6
6e
00
16
52
a3
b3
08
d4
7f
e5
a2
80
00
01
aa
0010
00
28
00
00
0000
¶
n
.
.
R
£
³
.
Ô
.
å
¢
.
.
.
ª
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 2914, Ack: 3382, Len: 0
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 2914 (relative sequence number)
- Acknowledgment number: 3382 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 426
- Calculated window size: 54528
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
b6
6e
00
16
52
a3
b3
08
d4
7f
e5
a2
80
00
01
aa
0010
00
4c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
e9
b7
3f
ab
9d
0b
d1
74
8b
7c
7a
64
66
d3
21
46
0030
20
bf
da
b6
fe
ed
69
16
c1
4f
fe
eb
06
89
71
fa
0040
01
63
be
76
0000
¶
n
.
.
R
£
³
.
Ô
.
å
¢
.
.
.
ª
0010
.
L
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
é
·
?
«
.
.
Ñ
t
.
|
z
d
f
Ó
!
F
0030
¿
Ú
¶
þ
í
i
.
Á
O
þ
ë
.
.
q
ú
0040
.
c
¾
v
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 2914, Ack: 3382, Len: 36
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 36
- Sequence number: 2914 (relative sequence number)
- Acknowledgment number: 3382 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 426
- Calculated window size: 54528
- Window size scaling factor: 128
- Checksum: 0x004c [unverified]
- Urgent pointer: 0
- TCP payload (36 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): e9b73fab
- Encrypted Packet: 9d0bd1748b7c7a6466d3214620bfdab6
- MAC: feed6916c14ffeeb068971fa0163be76
0000
00
16
b6
6e
d4
7f
e5
a2
52
a3
b3
2c
80
00
05
94
0010
00
4c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
1f
d7
db
5a
0b
5b
db
ac
89
18
39
89
20
0d
e0
1f
0030
99
a1
c7
eb
b6
29
6f
e9
16
17
13
f5
73
74
3e
40
0040
c1
0f
f6
0e
0000
.
.
¶
n
Ô
.
å
¢
R
£
³
,
.
.
.
.
0010
.
L
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
×
Û
Z
.
[
Û
¬
.
.
9
.
.
à
.
0030
.
¡
Ç
ë
¶
)
o
é
.
.
.
õ
s
t
>
@
0040
Á
.
ö
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 3382, Ack: 2950, Len: 36
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 36
- Sequence number: 3382 (relative sequence number)
- Acknowledgment number: 2950 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1428
- Calculated window size: 182784
- Window size scaling factor: 128
- Checksum: 0x004c [unverified]
- Urgent pointer: 0
- TCP payload (36 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): 1fd7db5a
- Encrypted Packet: 0b5bdbac89183989200de01f99a1c7eb
- MAC: b6296fe9161713f573743e40c10ff60e
0000
b6
6e
00
16
52
a3
b3
2c
d4
7f
e5
c6
80
00
01
aa
0010
00
28
00
00
0000
¶
n
.
.
R
£
³
,
Ô
.
å
Æ
.
.
.
ª
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 2950, Ack: 3418, Len: 0
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 2950 (relative sequence number)
- Acknowledgment number: 3418 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 426
- Calculated window size: 54528
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
b6
6e
00
16
52
a3
b3
2c
d4
7f
e5
c6
80
00
01
aa
0010
00
4c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
9b
24
1b
27
44
82
43
34
f5
39
46
4a
65
7e
08
0c
0030
b3
fe
35
1f
15
d2
9d
62
68
d7
d1
95
f5
da
ca
71
0040
58
b5
47
6b
0000
¶
n
.
.
R
£
³
,
Ô
.
å
Æ
.
.
.
ª
0010
.
L
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
$
.
'
D
.
C
4
õ
9
F
J
e
~
.
.
0030
³
þ
5
.
.
Ò
.
b
h
×
Ñ
.
õ
Ú
Ê
q
0040
X
µ
G
k
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 2950, Ack: 3418, Len: 36
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 36
- Sequence number: 2950 (relative sequence number)
- Acknowledgment number: 3418 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 426
- Calculated window size: 54528
- Window size scaling factor: 128
- Checksum: 0x004c [unverified]
- Urgent pointer: 0
- TCP payload (36 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): 9b241b27
- Encrypted Packet: 44824334f539464a657e080cb3fe351f
- MAC: 15d29d6268d7d195f5daca7158b5476b
0000
00
16
b6
6e
d4
7f
e5
c6
52
a3
b3
50
80
00
05
94
0010
00
4c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
46
44
b9
37
26
ae
89
e3
10
6f
c5
c2
98
f0
52
b4
0030
d5
6f
c6
21
2e
ad
18
4e
00
e0
5c
e8
64
fb
36
59
0040
57
00
41
47
0000
.
.
¶
n
Ô
.
å
Æ
R
£
³
P
.
.
.
.
0010
.
L
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
F
D
¹
7
&
®
.
ã
.
o
Å
Â
.
ð
R
´
0030
Õ
o
Æ
!
.
.
.
N
.
à
\
è
d
û
6
Y
0040
W
.
A
G
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 3418, Ack: 2986, Len: 36
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 36
- Sequence number: 3418 (relative sequence number)
- Acknowledgment number: 2986 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1428
- Calculated window size: 182784
- Window size scaling factor: 128
- Checksum: 0x004c [unverified]
- Urgent pointer: 0
- TCP payload (36 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): 4644b937
- Encrypted Packet: 26ae89e3106fc5c298f052b4d56fc621
- MAC: 2ead184e00e05ce864fb365957004147
0000
b6
6e
00
16
52
a3
b3
50
d4
7f
e5
ea
80
00
01
aa
0010
00
28
00
00
0000
¶
n
.
.
R
£
³
P
Ô
.
å
ê
.
.
.
ª
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 2986, Ack: 3454, Len: 0
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 2986 (relative sequence number)
- Acknowledgment number: 3454 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 426
- Calculated window size: 54528
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
b6
6e
00
16
52
a3
b3
50
d4
7f
e5
ea
80
00
01
aa
0010
00
4c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
b2
ac
d9
d1
23
f8
4e
06
66
9f
5b
6d
ef
dc
2c
a4
0030
00
e9
50
07
d8
e4
66
7a
df
14
46
f0
6e
79
7c
74
0040
4b
7a
a4
ca
0000
¶
n
.
.
R
£
³
P
Ô
.
å
ê
.
.
.
ª
0010
.
L
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
²
¬
Ù
Ñ
#
ø
N
.
f
.
[
m
ï
Ü
,
¤
0030
.
é
P
.
Ø
ä
f
z
ß
.
F
ð
n
y
|
t
0040
K
z
¤
Ê
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 2986, Ack: 3454, Len: 36
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 36
- Sequence number: 2986 (relative sequence number)
- Acknowledgment number: 3454 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 426
- Calculated window size: 54528
- Window size scaling factor: 128
- Checksum: 0x004c [unverified]
- Urgent pointer: 0
- TCP payload (36 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): b2acd9d1
- Encrypted Packet: 23f84e06669f5b6defdc2ca400e95007
- MAC: d8e4667adf1446f06e797c744b7aa4ca
0000
00
16
b6
6e
d4
7f
e5
ea
52
a3
b3
74
80
00
05
94
0010
00
4c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
03
45
4f
e4
f7
a5
5a
c2
30
fb
38
76
40
3b
53
19
0030
67
56
8f
d7
54
3f
17
2a
98
a5
f7
ce
ba
8b
6c
43
0040
02
f2
48
6b
0000
.
.
¶
n
Ô
.
å
ê
R
£
³
t
.
.
.
.
0010
.
L
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
E
O
ä
÷
¥
Z
Â
0
û
8
v
@
;
S
.
0030
g
V
.
×
T
?
.
*
.
¥
÷
Î
º
.
l
C
0040
.
ò
H
k
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 3454, Ack: 3022, Len: 36
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 36
- Sequence number: 3454 (relative sequence number)
- Acknowledgment number: 3022 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1428
- Calculated window size: 182784
- Window size scaling factor: 128
- Checksum: 0x004c [unverified]
- Urgent pointer: 0
- TCP payload (36 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): 03454fe4
- Encrypted Packet: f7a55ac230fb3876403b531967568fd7
- MAC: 543f172a98a5f7ceba8b6c4302f2486b
0000
b6
6e
00
16
52
a3
b3
74
d4
7f
e6
0e
80
00
01
aa
0010
00
28
00
00
0000
¶
n
.
.
R
£
³
t
Ô
.
æ
.
.
.
.
ª
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 3022, Ack: 3490, Len: 0
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 3022 (relative sequence number)
- Acknowledgment number: 3490 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 426
- Calculated window size: 54528
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
b6
6e
00
16
52
a3
b3
74
d4
7f
e6
0e
80
00
01
aa
0010
00
4c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
85
ac
9b
4d
4c
06
70
00
76
0b
7e
15
b4
ed
0d
d6
0030
d0
b1
61
12
b1
3c
6d
9a
7c
4f
97
1e
7c
6d
49
e3
0040
bb
88
bc
9f
0000
¶
n
.
.
R
£
³
t
Ô
.
æ
.
.
.
.
ª
0010
.
L
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
¬
.
M
L
.
p
.
v
.
~
.
´
í
.
Ö
0030
Ð
±
a
.
±
<
m
.
|
O
.
.
|
m
I
ã
0040
»
.
¼
.
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 3022, Ack: 3490, Len: 36
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 36
- Sequence number: 3022 (relative sequence number)
- Acknowledgment number: 3490 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 426
- Calculated window size: 54528
- Window size scaling factor: 128
- Checksum: 0x004c [unverified]
- Urgent pointer: 0
- TCP payload (36 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): 85ac9b4d
- Encrypted Packet: 4c067000760b7e15b4ed0dd6d0b16112
- MAC: b13c6d9a7c4f971e7c6d49e3bb88bc9f
0000
00
16
b6
6e
d4
7f
e6
0e
52
a3
b3
98
80
00
05
94
0010
00
4c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
b7
05
f9
ff
33
58
3b
f1
dd
76
fe
42
89
60
15
53
0030
fb
7a
3b
b7
bd
46
c1
fe
a3
5d
8b
56
74
e9
19
64
0040
d8
47
ca
f5
0000
.
.
¶
n
Ô
.
æ
.
R
£
³
.
.
.
.
.
0010
.
L
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
·
.
ù
ÿ
3
X
;
ñ
Ý
v
þ
B
.
`
.
S
0030
û
z
;
·
½
F
Á
þ
£
]
.
V
t
é
.
d
0040
Ø
G
Ê
õ
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 3490, Ack: 3058, Len: 36
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 36
- Sequence number: 3490 (relative sequence number)
- Acknowledgment number: 3058 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1428
- Calculated window size: 182784
- Window size scaling factor: 128
- Checksum: 0x004c [unverified]
- Urgent pointer: 0
- TCP payload (36 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): b705f9ff
- Encrypted Packet: 33583bf1dd76fe4289601553fb7a3bb7
- MAC: bd46c1fea35d8b5674e91964d847caf5
0000
b6
6e
00
16
52
a3
b3
98
d4
7f
e6
32
80
00
01
aa
0010
00
28
00
00
0000
¶
n
.
.
R
£
³
.
Ô
.
æ
2
.
.
.
ª
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 3058, Ack: 3526, Len: 0
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 3058 (relative sequence number)
- Acknowledgment number: 3526 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 426
- Calculated window size: 54528
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
b6
6e
00
16
52
a3
b3
98
d4
7f
e6
32
80
00
01
aa
0010
00
4c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
c5
ab
27
78
eb
de
ac
e4
d3
87
0e
1b
f5
d5
2f
90
0030
67
61
de
29
2b
3d
d6
07
bb
49
dc
7e
bf
a6
6e
e4
0040
3d
c4
16
fa
0000
¶
n
.
.
R
£
³
.
Ô
.
æ
2
.
.
.
ª
0010
.
L
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
Å
«
'
x
ë
Þ
¬
ä
Ó
.
.
.
õ
Õ
/
.
0030
g
a
Þ
)
+
=
Ö
.
»
I
Ü
~
¿
¦
n
ä
0040
=
Ä
.
ú
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 3058, Ack: 3526, Len: 36
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 36
- Sequence number: 3058 (relative sequence number)
- Acknowledgment number: 3526 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 426
- Calculated window size: 54528
- Window size scaling factor: 128
- Checksum: 0x004c [unverified]
- Urgent pointer: 0
- TCP payload (36 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): c5ab2778
- Encrypted Packet: ebdeace4d3870e1bf5d52f906761de29
- MAC: 2b3dd607bb49dc7ebfa66ee43dc416fa
0000
00
16
b6
6e
d4
7f
e6
32
52
a3
b3
bc
80
00
05
94
0010
00
4c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
c6
3f
bf
65
6f
0d
91
2b
3d
1a
65
bc
e1
20
c4
3f
0030
45
77
a7
ff
0f
68
54
ca
94
42
44
36
e3
14
23
61
0040
94
a8
ae
f6
0000
.
.
¶
n
Ô
.
æ
2
R
£
³
¼
.
.
.
.
0010
.
L
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
Æ
?
¿
e
o
.
.
+
=
.
e
¼
á
Ä
?
0030
E
w
§
ÿ
.
h
T
Ê
.
B
D
6
ã
.
#
a
0040
.
¨
®
ö
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 3526, Ack: 3094, Len: 36
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 36
- Sequence number: 3526 (relative sequence number)
- Acknowledgment number: 3094 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1428
- Calculated window size: 182784
- Window size scaling factor: 128
- Checksum: 0x004c [unverified]
- Urgent pointer: 0
- TCP payload (36 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): c63fbf65
- Encrypted Packet: 6f0d912b3d1a65bce120c43f4577a7ff
- MAC: 0f6854ca94424436e314236194a8aef6
0000
b6
6e
00
16
52
a3
b3
bc
d4
7f
e6
56
80
00
01
aa
0010
00
28
00
00
0000
¶
n
.
.
R
£
³
¼
Ô
.
æ
V
.
.
.
ª
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 3094, Ack: 3562, Len: 0
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 3094 (relative sequence number)
- Acknowledgment number: 3562 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 426
- Calculated window size: 54528
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
b6
6e
d4
7f
e6
56
52
a3
b3
bc
80
00
05
94
0010
00
54
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
9b
df
83
ad
ee
a8
aa
91
c8
d9
77
35
dd
5e
fd
5a
0030
a9
b2
78
dc
b7
67
7b
b5
25
53
fc
7e
60
da
9a
76
0040
20
6c
cd
fd
69
62
70
5c
6f
82
ca
be
0000
.
.
¶
n
Ô
.
æ
V
R
£
³
¼
.
.
.
.
0010
.
T
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
ß
.
.
î
¨
ª
.
È
Ù
w
5
Ý
^
ý
Z
0030
©
²
x
Ü
·
g
{
µ
%
S
ü
~
`
Ú
.
v
0040
l
Í
ý
i
b
p
\
o
.
Ê
¾
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 3562, Ack: 3094, Len: 44
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 44
- Sequence number: 3562 (relative sequence number)
- Acknowledgment number: 3094 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1428
- Calculated window size: 182784
- Window size scaling factor: 128
- Checksum: 0x0054 [unverified]
- Urgent pointer: 0
- TCP payload (44 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): 9bdf83ad
- Encrypted Packet: eea8aa91c8d97735dd5efd5aa9b278dcb7677bb52553fc7e
- MAC: 60da9a76206ccdfd6962705c6f82cabe
0000
b6
6e
00
16
52
a3
b3
bc
d4
7f
e6
82
80
00
01
aa
0010
00
28
00
00
0000
¶
n
.
.
R
£
³
¼
Ô
.
æ
.
.
.
.
ª
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 3094, Ack: 3606, Len: 0
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 3094 (relative sequence number)
- Acknowledgment number: 3606 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 426
- Calculated window size: 54528
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
b6
6e
d4
7f
e6
82
52
a3
b3
bc
80
00
05
94
0010
00
c0
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
93
4d
47
71
98
a3
34
b6
fd
4d
4a
df
cd
98
d0
e0
0030
d8
49
14
48
c2
a1
76
7a
d9
12
3f
3e
c8
e0
8a
d5
0040
dd
0a
6f
b8
ea
f9
5e
7d
df
0a
0a
eb
91
0c
2f
b7
0050
2f
21
51
95
75
a6
02
a0
49
d7
7b
f1
5a
8a
4b
ca
0060
2c
f7
70
9c
aa
ca
54
22
a8
81
0f
c8
39
82
65
3b
0070
fe
99
ff
c6
15
4d
d5
13
0b
63
22
57
ad
3d
71
e7
0080
38
f0
19
5b
f1
aa
a3
98
e7
52
f3
47
fb
0d
b1
62
0090
47
81
45
e0
d9
c7
44
5f
1b
8e
05
cc
d0
21
9c
76
00A0
56
8b
4f
eb
55
8a
82
cc
5b
4a
82
61
50
36
25
3b
00B0
29
1a
07
e2
bc
3e
db
d4
0000
.
.
¶
n
Ô
.
æ
.
R
£
³
¼
.
.
.
.
0010
.
À
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
.
M
G
q
.
£
4
¶
ý
M
J
ß
Í
.
Ð
à
0030
Ø
I
.
H
Â
¡
v
z
Ù
.
?
>
È
à
.
Õ
0040
Ý
.
o
¸
ê
ù
^
}
ß
.
.
ë
.
.
/
·
0050
/
!
Q
.
u
¦
.
.
I
×
{
ñ
Z
.
K
Ê
0060
,
÷
p
.
ª
Ê
T
"
¨
.
.
È
9
.
e
;
0070
þ
.
ÿ
Æ
.
M
Õ
.
.
c
"
W
.
=
q
ç
0080
8
ð
.
[
ñ
ª
£
.
ç
R
ó
G
û
.
±
b
0090
G
.
E
à
Ù
Ç
D
_
.
.
.
Ì
Ð
!
.
v
00A0
V
.
O
ë
U
.
.
Ì
[
J
.
a
P
6
%
;
00B0
)
.
.
â
¼
>
Û
Ô
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 3606, Ack: 3094, Len: 152
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 152
- Sequence number: 3606 (relative sequence number)
- Acknowledgment number: 3094 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1428
- Calculated window size: 182784
- Window size scaling factor: 128
- Checksum: 0x00c0 [unverified]
- Urgent pointer: 0
- TCP payload (152 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): 934d4771
- Encrypted Packet: 98a334b6fd4d4adfcd98d0e0d8491448c2a1767ad9123f3e...
- MAC: 5b4a82615036253b291a07e2bc3edbd4
0000
b6
6e
00
16
52
a3
b3
bc
d4
7f
e7
1a
80
00
01
bb
0010
00
28
00
00
0000
¶
n
.
.
R
£
³
¼
Ô
.
ç
.
.
.
.
»
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 3094, Ack: 3758, Len: 0
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 3094 (relative sequence number)
- Acknowledgment number: 3758 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 443
- Calculated window size: 56704
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
b6
6e
00
16
52
a3
b3
bc
d4
7f
e7
1a
80
00
01
bb
0010
00
4c
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
46
0d
96
2b
15
a7
13
2e
95
fa
fd
c3
a7
ac
27
ba
0030
99
96
0f
17
7b
2b
1b
3e
a4
cc
76
db
93
dd
c8
9e
0040
49
33
2a
f6
0000
¶
n
.
.
R
£
³
¼
Ô
.
ç
.
.
.
.
»
0010
.
L
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
F
.
.
+
.
§
.
.
.
ú
ý
Ã
§
¬
'
º
0030
.
.
.
.
{
+
.
>
¤
Ì
v
Û
.
Ý
È
.
0040
I
3
*
ö
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 3094, Ack: 3758, Len: 36
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 36
- Sequence number: 3094 (relative sequence number)
- Acknowledgment number: 3758 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 443
- Calculated window size: 56704
- Window size scaling factor: 128
- Checksum: 0x004c [unverified]
- Urgent pointer: 0
- TCP payload (36 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): 460d962b
- Encrypted Packet: 15a7132e95fafdc3a7ac27ba99960f17
- MAC: 7b2b1b3ea4cc76db93ddc89e49332af6
0000
b6
6e
00
16
52
a3
b3
e0
d4
7f
e7
1a
80
00
01
bb
0010
00
64
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0020
45
56
1c
c4
74
86
e4
1a
a7
07
72
e8
1d
0a
b0
a3
0030
81
ca
86
67
1c
66
aa
e7
aa
11
43
61
f5
10
1c
7e
0040
b5
21
89
47
5b
81
08
0f
f8
69
07
28
40
bf
33
6b
0050
29
0f
26
6a
05
79
69
c0
fc
21
6a
50
0000
¶
n
.
.
R
£
³
à
Ô
.
ç
.
.
.
.
»
0010
.
d
.
.
.
.
.
.
.
.
.
.
.
.
.
.
0020
E
V
.
Ä
t
.
ä
.
§
.
r
è
.
.
°
£
0030
.
Ê
.
g
.
f
ª
ç
ª
.
C
a
õ
.
.
~
0040
µ
!
.
G
[
.
.
.
ø
i
.
(
@
¿
3
k
0050
)
.
&
j
.
y
i
À
ü
!
j
P
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 3130, Ack: 3758, Len: 60
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 60
- Sequence number: 3130 (relative sequence number)
- Acknowledgment number: 3758 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 443
- Calculated window size: 56704
- Window size scaling factor: 128
- Checksum: 0x0064 [unverified]
- Urgent pointer: 0
- TCP payload (60 bytes)
- SSH Protocol
- SSH Version 2 (encryption:chacha20-poly1305@openssh.com mac: compression:zlib@openssh.com)
- Packet Length (encrypted): 45561cc4
- Encrypted Packet: 7486e41aa70772e81d0ab0a381ca86671c66aae7aa114361...
- MAC: 40bf336b290f266a057969c0fc216a50
0000
b6
6e
00
16
52
a3
b4
1c
d4
7f
e7
1a
80
00
01
bb
0010
00
28
00
00
0000
¶
n
.
.
R
£
´
.
Ô
.
ç
.
.
.
.
»
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 3190, Ack: 3758, Len: 0
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 3190 (relative sequence number)
- Acknowledgment number: 3758 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 443
- Calculated window size: 56704
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
b6
6e
d4
7f
e7
1a
52
a3
b4
1d
80
00
05
94
0010
00
28
00
00
0000
.
.
¶
n
Ô
.
ç
.
R
£
´
.
.
.
.
.
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 3758, Ack: 3191, Len: 0
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 0
- Sequence number: 3758 (relative sequence number)
- Acknowledgment number: 3191 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1428
- Calculated window size: 182784
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
00
16
b6
6e
d4
7f
e7
1a
52
a3
b4
1d
80
00
05
94
0010
00
28
00
00
0000
.
.
¶
n
Ô
.
ç
.
R
£
´
.
.
.
.
.
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 22, Dst Port: 46702, Seq: 3758, Ack: 3191, Len: 0
- Source Port: 22
- Destination Port: 46702
- TCP Segment Len: 0
- Sequence number: 3758 (relative sequence number)
- Acknowledgment number: 3191 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 1428
- Calculated window size: 182784
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0
0000
b6
6e
00
16
52
a3
b4
1d
d4
7f
e7
1b
80
00
01
bb
0010
00
28
00
00
0000
¶
n
.
.
R
£
´
.
Ô
.
ç
.
.
.
.
»
0010
.
(
.
.
- Transmission Control Protocol, Src Port: 46702, Dst Port: 22, Seq: 3191, Ack: 3759, Len: 0
- Source Port: 46702
- Destination Port: 22
- TCP Segment Len: 0
- Sequence number: 3191 (relative sequence number)
- Acknowledgment number: 3759 (relative ack number)
- 1000 .... = Header Length: 32 bytes (8)
- Window size value: 443
- Calculated window size: 56704
- Window size scaling factor: 128
- Checksum: 0x0028 [unverified]
- Urgent pointer: 0