No. Time Source Destination Protocol Info 1 0.000000 10.0.1.11 10.0.1.12 ICMP Echo (ping) request 2 0.000268 10.0.1.12 10.0.1.11 ICMP Echo (ping) reply 3 0.783406 10.0.1.11 10.0.1.12 TCP 36033 > 22 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=892038 TSER=0 WS=2 4 0.783636 10.0.1.12 10.0.1.11 TCP 22 > 36033 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=936105 TSER=892038 WS=2 5 0.783662 10.0.1.11 10.0.1.12 TCP 36033 > 22 [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=892038 TSER=936105 6 0.791757 10.0.1.12 10.0.1.11 SSHv2 Server Protocol: SSH-2.0-OpenSSH_3.9p1 7 0.791773 10.0.1.11 10.0.1.12 TCP 36033 > 22 [ACK] Seq=1 Ack=23 Win=5840 Len=0 TSV=892046 TSER=936113 8 0.807309 10.0.1.11 10.0.1.12 SSHv2 Client Protocol: SSH-2.0-OpenSSH_3.9p1 9 0.807539 10.0.1.12 10.0.1.11 TCP 22 > 36033 [ACK] Seq=23 Ack=23 Win=5792 Len=0 TSV=936129 TSER=892062 10 0.807767 10.0.1.11 10.0.1.12 SSHv2 Client: Key Exchange Init 11 0.808505 10.0.1.12 10.0.1.11 TCP 22 > 36033 [ACK] Seq=23 Ack=663 Win=7072 Len=0 TSV=936130 TSER=892062 12 0.809552 10.0.1.12 10.0.1.11 SSHv2 Server: Key Exchange Init 13 0.809711 10.0.1.11 10.0.1.12 SSHv2 Client: Diffie-Hellman GEX Request 14 0.829218 10.0.1.12 10.0.1.11 SSHv2 Server: Diffie-Hellman Key Exchange Reply 15 0.833083 10.0.1.11 10.0.1.12 SSHv2 Client: Diffie-Hellman GEX Init 16 0.855491 10.0.1.12 10.0.1.11 SSHv2 Server: Diffie-Hellman GEX Reply 17 0.895672 10.0.1.11 10.0.1.12 TCP 36033 > 22 [ACK] Seq=831 Ack=1279 Win=9680 Len=0 TSV=892150 TSER=936176 18 1.000676 10.0.1.11 10.0.1.12 ICMP Echo (ping) request 19 1.000921 10.0.1.12 10.0.1.11 ICMP Echo (ping) reply 20 2.007313 10.0.1.11 10.0.1.12 ICMP Echo (ping) request 21 2.007581 10.0.1.12 10.0.1.11 ICMP Echo (ping) reply 22 2.204269 10.0.1.11 10.0.1.12 SSHv2 Client: New Keys 23 2.245073 10.0.1.12 10.0.1.11 TCP 22 > 36033 [ACK] Seq=1279 Ack=847 Win=8352 Len=0 TSV=937566 TSER=893459 24 2.245111 10.0.1.11 10.0.1.12 SSHv2 Encrypted request packet len=48 25 2.245330 10.0.1.12 10.0.1.11 TCP 22 > 36033 [ACK] Seq=1279 Ack=895 Win=8352 Len=0 TSV=937567 TSER=893500 26 2.245483 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=48 27 2.245492 10.0.1.11 10.0.1.12 TCP 36033 > 22 [ACK] Seq=895 Ack=1327 Win=9680 Len=0 TSV=893500 TSER=937567 28 2.246001 10.0.1.11 10.0.1.12 SSHv2 Encrypted request packet len=64 29 2.247886 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=64 30 2.248007 10.0.1.11 10.0.1.12 SSHv2 Encrypted request packet len=96 31 2.260568 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=64 32 2.300425 10.0.1.11 10.0.1.12 TCP 36033 > 22 [ACK] Seq=1055 Ack=1455 Win=9680 Len=0 TSV=893555 TSER=937582 33 3.007330 10.0.1.11 10.0.1.12 ICMP Echo (ping) request 34 3.007589 10.0.1.12 10.0.1.11 ICMP Echo (ping) reply 35 4.005504 10.0.1.11 10.0.1.12 SSHv2 Encrypted request packet len=80 36 4.008167 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=48 37 4.032123 10.0.1.11 10.0.1.12 TCP 36033 > 22 [ACK] Seq=1135 Ack=1503 Win=9680 Len=0 TSV=895287 TSER=939330 38 4.032352 10.0.1.11 10.0.1.12 SSHv2 Encrypted request packet len=80 39 4.032429 10.0.1.11 10.0.1.12 ICMP Echo (ping) request 40 4.032730 10.0.1.12 10.0.1.11 ICMP Echo (ping) reply 41 4.033346 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=32 42 4.033880 10.0.1.11 10.0.1.12 SSHv2 Encrypted request packet len=64 43 4.034725 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=48 44 4.034971 10.0.1.11 10.0.1.12 SSHv2 Encrypted request packet len=384 45 4.055725 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=48 46 4.055854 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=80 47 4.096118 10.0.1.11 10.0.1.12 TCP 36033 > 22 [ACK] Seq=1663 Ack=1711 Win=9680 Len=0 TSV=895351 TSER=939377 48 4.096376 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=64 49 4.096400 10.0.1.11 10.0.1.12 TCP 36033 > 22 [ACK] Seq=1663 Ack=1775 Win=9680 Len=0 TSV=895351 TSER=939418 50 29.717401 10.0.1.11 10.0.1.12 SSHv2 Encrypted request packet len=48 51 29.717953 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=48 52 29.717981 10.0.1.11 10.0.1.12 TCP 36033 > 22 [ACK] Seq=1711 Ack=1823 Win=9680 Len=0 TSV=920977 TSER=965043 53 29.898323 10.0.1.11 10.0.1.12 SSHv2 Encrypted request packet len=48 54 29.898705 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=48 55 29.898730 10.0.1.11 10.0.1.12 TCP 36033 > 22 [ACK] Seq=1759 Ack=1871 Win=9680 Len=0 TSV=921158 TSER=965224 56 30.023907 10.0.1.11 10.0.1.12 SSHv2 Encrypted request packet len=48 57 30.024294 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=48 58 30.024319 10.0.1.11 10.0.1.12 TCP 36033 > 22 [ACK] Seq=1807 Ack=1919 Win=9680 Len=0 TSV=921283 TSER=965350 59 30.154934 10.0.1.11 10.0.1.12 SSHv2 Encrypted request packet len=48 60 30.155329 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=48 61 30.155354 10.0.1.11 10.0.1.12 TCP 36033 > 22 [ACK] Seq=1855 Ack=1967 Win=9680 Len=0 TSV=921414 TSER=965481 62 30.521900 10.0.1.11 10.0.1.12 SSHv2 Encrypted request packet len=48 63 30.522404 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=48 64 30.522431 10.0.1.11 10.0.1.12 TCP 36033 > 22 [ACK] Seq=1903 Ack=2015 Win=9680 Len=0 TSV=921781 TSER=965848 65 30.524392 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=112 66 30.524407 10.0.1.11 10.0.1.12 TCP 36033 > 22 [ACK] Seq=1903 Ack=2127 Win=9680 Len=0 TSV=921783 TSER=965850 67 30.524511 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=64 68 30.524524 10.0.1.11 10.0.1.12 TCP 36033 > 22 [ACK] Seq=1903 Ack=2191 Win=9680 Len=0 TSV=921784 TSER=965850 69 30.525783 10.0.1.11 10.0.1.12 SSHv2 Encrypted request packet len=32 70 30.525866 10.0.1.11 10.0.1.12 TCP 36033 > 22 [FIN, ACK] Seq=1935 Ack=2191 Win=9680 Len=0 TSV=921785 TSER=965850 71 30.526535 10.0.1.12 10.0.1.11 TCP 22 > 36033 [FIN, ACK] Seq=2191 Ack=1936 Win=9632 Len=0 TSV=965852 TSER=921785 72 30.526572 10.0.1.11 10.0.1.12 TCP 36033 > 22 [ACK] Seq=1936 Ack=2192 Win=9680 Len=0 TSV=921786 TSER=965852