No. Time Source Destination Protocol Info 1 0.000000 10.0.1.11 10.0.1.12 TCP 33549 > 22 [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=8959259 TSER=0 WS=2 Frame 1 (74 bytes on wire, 74 bytes captured) Ethernet II, Src: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be), Dst: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67) Internet Protocol, Src: 10.0.1.11 (10.0.1.11), Dst: 10.0.1.12 (10.0.1.12) Transmission Control Protocol, Src Port: 33549 (33549), Dst Port: 22 (22), Seq: 0, Ack: 0, Len: 0 Source port: 33549 (33549) Destination port: 22 (22) Sequence number: 0 (relative sequence number) Header length: 40 bytes Flags: 0x0002 (SYN) Window size: 5840 Checksum: 0x0eb5 [correct] Options: (20 bytes) No. Time Source Destination Protocol Info 2 0.000525 00:e0:4c:78:bf:67 ff:ff:ff:ff:ff:ff ARP Who has 10.0.1.11? Tell 10.0.1.12 Frame 2 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67), Dst: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 3 0.000551 00:e0:4c:78:c2:be 00:e0:4c:78:bf:67 ARP 10.0.1.11 is at 00:e0:4c:78:c2:be Frame 3 (42 bytes on wire, 42 bytes captured) Ethernet II, Src: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be), Dst: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67) Address Resolution Protocol (reply) No. Time Source Destination Protocol Info 4 0.000729 10.0.1.12 10.0.1.11 TCP 22 > 33549 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=4697388 TSER=8959259 WS=2 Frame 4 (74 bytes on wire, 74 bytes captured) Ethernet II, Src: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67), Dst: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be) Internet Protocol, Src: 10.0.1.12 (10.0.1.12), Dst: 10.0.1.11 (10.0.1.11) Transmission Control Protocol, Src Port: 22 (22), Dst Port: 33549 (33549), Seq: 0, Ack: 1, Len: 0 Source port: 22 (22) Destination port: 33549 (33549) Sequence number: 0 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 40 bytes Flags: 0x0012 (SYN, ACK) Window size: 5792 Checksum: 0xbec8 [correct] Options: (20 bytes) SEQ/ACK analysis No. Time Source Destination Protocol Info 5 0.000756 10.0.1.11 10.0.1.12 TCP 33549 > 22 [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=8959260 TSER=4697388 Frame 5 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be), Dst: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67) Internet Protocol, Src: 10.0.1.11 (10.0.1.11), Dst: 10.0.1.12 (10.0.1.12) Transmission Control Protocol, Src Port: 33549 (33549), Dst Port: 22 (22), Seq: 1, Ack: 1, Len: 0 Source port: 33549 (33549) Destination port: 22 (22) Sequence number: 1 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 32 bytes Flags: 0x0010 (ACK) Window size: 5840 (scaled) Checksum: 0xfe7a [correct] Options: (12 bytes) SEQ/ACK analysis No. Time Source Destination Protocol Info 6 0.008839 10.0.1.12 10.0.1.11 SSHv2 Server Protocol: SSH-2.0-OpenSSH_3.9p1 Frame 6 (88 bytes on wire, 88 bytes captured) Ethernet II, Src: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67), Dst: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be) Internet Protocol, Src: 10.0.1.12 (10.0.1.12), Dst: 10.0.1.11 (10.0.1.11) Transmission Control Protocol, Src Port: 22 (22), Dst Port: 33549 (33549), Seq: 1, Ack: 1, Len: 22 Source port: 22 (22) Destination port: 33549 (33549) Sequence number: 1 (relative sequence number) Next sequence number: 23 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 5792 (scaled) Checksum: 0x124a [correct] Options: (12 bytes) SSH Protocol No. Time Source Destination Protocol Info 7 0.008911 10.0.1.11 10.0.1.12 TCP 33549 > 22 [ACK] Seq=1 Ack=23 Win=5840 Len=0 TSV=8959268 TSER=4697397 Frame 7 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be), Dst: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67) Internet Protocol, Src: 10.0.1.11 (10.0.1.11), Dst: 10.0.1.12 (10.0.1.12) Transmission Control Protocol, Src Port: 33549 (33549), Dst Port: 22 (22), Seq: 1, Ack: 23, Len: 0 Source port: 33549 (33549) Destination port: 22 (22) Sequence number: 1 (relative sequence number) Acknowledgement number: 23 (relative ack number) Header length: 32 bytes Flags: 0x0010 (ACK) Window size: 5840 (scaled) Checksum: 0xfe53 [correct] Options: (12 bytes) SEQ/ACK analysis No. Time Source Destination Protocol Info 8 0.009061 10.0.1.11 10.0.1.12 SSHv2 Client Protocol: SSH-2.0-OpenSSH_3.9p1 Frame 8 (88 bytes on wire, 88 bytes captured) Ethernet II, Src: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be), Dst: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67) Internet Protocol, Src: 10.0.1.11 (10.0.1.11), Dst: 10.0.1.12 (10.0.1.12) Transmission Control Protocol, Src Port: 33549 (33549), Dst Port: 22 (22), Seq: 1, Ack: 23, Len: 22 Source port: 33549 (33549) Destination port: 22 (22) Sequence number: 1 (relative sequence number) Next sequence number: 23 (relative sequence number) Acknowledgement number: 23 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 5840 (scaled) Checksum: 0x1653 [incorrect, should be 0x1220] Options: (12 bytes) SSH Protocol No. Time Source Destination Protocol Info 9 0.009268 10.0.1.12 10.0.1.11 TCP 22 > 33549 [ACK] Seq=23 Ack=23 Win=5792 Len=0 TSV=4697397 TSER=8959268 Frame 9 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67), Dst: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be) Internet Protocol, Src: 10.0.1.12 (10.0.1.12), Dst: 10.0.1.11 (10.0.1.11) Transmission Control Protocol, Src Port: 22 (22), Dst Port: 33549 (33549), Seq: 23, Ack: 23, Len: 0 Source port: 22 (22) Destination port: 33549 (33549) Sequence number: 23 (relative sequence number) Acknowledgement number: 23 (relative ack number) Header length: 32 bytes Flags: 0x0010 (ACK) Window size: 5792 (scaled) Checksum: 0xfe49 [correct] Options: (12 bytes) SEQ/ACK analysis No. Time Source Destination Protocol Info 10 0.009567 10.0.1.11 10.0.1.12 SSHv2 Client: Key Exchange Init Frame 10 (706 bytes on wire, 706 bytes captured) Ethernet II, Src: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be), Dst: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67) Internet Protocol, Src: 10.0.1.11 (10.0.1.11), Dst: 10.0.1.12 (10.0.1.12) Transmission Control Protocol, Src Port: 33549 (33549), Dst Port: 22 (22), Seq: 23, Ack: 23, Len: 640 Source port: 33549 (33549) Destination port: 22 (22) Sequence number: 23 (relative sequence number) Next sequence number: 663 (relative sequence number) Acknowledgement number: 23 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 5840 (scaled) Checksum: 0x18bd [incorrect, should be 0xf9cb] Options: (12 bytes) SSH Protocol No. Time Source Destination Protocol Info 11 0.010290 10.0.1.12 10.0.1.11 TCP 22 > 33549 [ACK] Seq=23 Ack=663 Win=7072 Len=0 TSV=4697398 TSER=8959269 Frame 11 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67), Dst: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be) Internet Protocol, Src: 10.0.1.12 (10.0.1.12), Dst: 10.0.1.11 (10.0.1.11) Transmission Control Protocol, Src Port: 22 (22), Dst Port: 33549 (33549), Seq: 23, Ack: 663, Len: 0 Source port: 22 (22) Destination port: 33549 (33549) Sequence number: 23 (relative sequence number) Acknowledgement number: 663 (relative ack number) Header length: 32 bytes Flags: 0x0010 (ACK) Window size: 7072 (scaled) Checksum: 0xfa87 [correct] Options: (12 bytes) SEQ/ACK analysis No. Time Source Destination Protocol Info 12 0.011170 10.0.1.12 10.0.1.11 SSHv2 Server: Key Exchange Init Frame 12 (706 bytes on wire, 706 bytes captured) Ethernet II, Src: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67), Dst: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be) Internet Protocol, Src: 10.0.1.12 (10.0.1.12), Dst: 10.0.1.11 (10.0.1.11) Transmission Control Protocol, Src Port: 22 (22), Dst Port: 33549 (33549), Seq: 23, Ack: 663, Len: 640 Source port: 22 (22) Destination port: 33549 (33549) Sequence number: 23 (relative sequence number) Next sequence number: 663 (relative sequence number) Acknowledgement number: 663 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 7072 (scaled) Checksum: 0x4a20 [correct] Options: (12 bytes) SSH Protocol No. Time Source Destination Protocol Info 13 0.011340 10.0.1.11 10.0.1.12 SSHv2 Client: Diffie-Hellman GEX Request Frame 13 (90 bytes on wire, 90 bytes captured) Ethernet II, Src: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be), Dst: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67) Internet Protocol, Src: 10.0.1.11 (10.0.1.11), Dst: 10.0.1.12 (10.0.1.12) Transmission Control Protocol, Src Port: 33549 (33549), Dst Port: 22 (22), Seq: 663, Ack: 663, Len: 24 Source port: 33549 (33549) Destination port: 22 (22) Sequence number: 663 (relative sequence number) Next sequence number: 687 (relative sequence number) Acknowledgement number: 663 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 7120 (scaled) Checksum: 0x1655 [incorrect, should be 0xc9a3] Options: (12 bytes) SEQ/ACK analysis SSH Protocol No. Time Source Destination Protocol Info 14 0.015794 10.0.1.12 10.0.1.11 SSHv2 Server: Diffie-Hellman Key Exchange Reply Frame 14 (218 bytes on wire, 218 bytes captured) Ethernet II, Src: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67), Dst: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be) Internet Protocol, Src: 10.0.1.12 (10.0.1.12), Dst: 10.0.1.11 (10.0.1.11) Transmission Control Protocol, Src Port: 22 (22), Dst Port: 33549 (33549), Seq: 663, Ack: 687, Len: 152 Source port: 22 (22) Destination port: 33549 (33549) Sequence number: 663 (relative sequence number) Next sequence number: 815 (relative sequence number) Acknowledgement number: 687 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 7072 (scaled) Checksum: 0x6034 [correct] Options: (12 bytes) SEQ/ACK analysis SSH Protocol No. Time Source Destination Protocol Info 15 0.019613 10.0.1.11 10.0.1.12 SSHv2 Client: Diffie-Hellman GEX Init Frame 15 (210 bytes on wire, 210 bytes captured) Ethernet II, Src: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be), Dst: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67) Internet Protocol, Src: 10.0.1.11 (10.0.1.11), Dst: 10.0.1.12 (10.0.1.12) Transmission Control Protocol, Src Port: 33549 (33549), Dst Port: 22 (22), Seq: 687, Ack: 815, Len: 144 Source port: 33549 (33549) Destination port: 22 (22) Sequence number: 687 (relative sequence number) Next sequence number: 831 (relative sequence number) Acknowledgement number: 815 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 8400 (scaled) Checksum: 0x16cd [incorrect, should be 0xd48c] Options: (12 bytes) SEQ/ACK analysis SSH Protocol No. Time Source Destination Protocol Info 16 0.031012 10.0.1.12 10.0.1.11 SSHv2 Server: Diffie-Hellman GEX Reply Frame 16 (530 bytes on wire, 530 bytes captured) Ethernet II, Src: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67), Dst: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be) Internet Protocol, Src: 10.0.1.12 (10.0.1.12), Dst: 10.0.1.11 (10.0.1.11) Transmission Control Protocol, Src Port: 22 (22), Dst Port: 33549 (33549), Seq: 815, Ack: 831, Len: 464 Source port: 22 (22) Destination port: 33549 (33549) Sequence number: 815 (relative sequence number) Next sequence number: 1279 (relative sequence number) Acknowledgement number: 831 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 8352 (scaled) Checksum: 0x5dc9 [correct] Options: (12 bytes) SEQ/ACK analysis SSH Protocol No. Time Source Destination Protocol Info 17 0.036187 10.0.1.11 10.0.1.12 SSHv2 Client: New Keys Frame 17 (82 bytes on wire, 82 bytes captured) Ethernet II, Src: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be), Dst: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67) Internet Protocol, Src: 10.0.1.11 (10.0.1.11), Dst: 10.0.1.12 (10.0.1.12) Transmission Control Protocol, Src Port: 33549 (33549), Dst Port: 22 (22), Seq: 831, Ack: 1279, Len: 16 Source port: 33549 (33549) Destination port: 22 (22) Sequence number: 831 (relative sequence number) Next sequence number: 847 (relative sequence number) Acknowledgement number: 1279 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 9680 (scaled) Checksum: 0x164d [incorrect, should be 0xe803] Options: (12 bytes) SEQ/ACK analysis SSH Protocol No. Time Source Destination Protocol Info 18 0.076529 10.0.1.12 10.0.1.11 TCP 22 > 33549 [ACK] Seq=1279 Ack=847 Win=8352 Len=0 TSV=4697465 TSER=8959295 Frame 18 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67), Dst: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be) Internet Protocol, Src: 10.0.1.12 (10.0.1.12), Dst: 10.0.1.11 (10.0.1.11) Transmission Control Protocol, Src Port: 22 (22), Dst Port: 33549 (33549), Seq: 1279, Ack: 847, Len: 0 Source port: 22 (22) Destination port: 33549 (33549) Sequence number: 1279 (relative sequence number) Acknowledgement number: 847 (relative ack number) Header length: 32 bytes Flags: 0x0010 (ACK) Window size: 8352 (scaled) Checksum: 0xf34a [correct] Options: (12 bytes) SEQ/ACK analysis No. Time Source Destination Protocol Info 19 0.076562 10.0.1.11 10.0.1.12 SSHv2 Encrypted request packet len=48 Frame 19 (114 bytes on wire, 114 bytes captured) Ethernet II, Src: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be), Dst: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67) Internet Protocol, Src: 10.0.1.11 (10.0.1.11), Dst: 10.0.1.12 (10.0.1.12) Transmission Control Protocol, Src Port: 33549 (33549), Dst Port: 22 (22), Seq: 847, Ack: 1279, Len: 48 Source port: 33549 (33549) Destination port: 22 (22) Sequence number: 847 (relative sequence number) Next sequence number: 895 (relative sequence number) Acknowledgement number: 1279 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 9680 (scaled) Checksum: 0x166d [incorrect, should be 0x730a] Options: (12 bytes) SSH Protocol No. Time Source Destination Protocol Info 20 0.076781 10.0.1.12 10.0.1.11 TCP 22 > 33549 [ACK] Seq=1279 Ack=895 Win=8352 Len=0 TSV=4697465 TSER=8959336 Frame 20 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67), Dst: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be) Internet Protocol, Src: 10.0.1.12 (10.0.1.12), Dst: 10.0.1.11 (10.0.1.11) Transmission Control Protocol, Src Port: 22 (22), Dst Port: 33549 (33549), Seq: 1279, Ack: 895, Len: 0 Source port: 22 (22) Destination port: 33549 (33549) Sequence number: 1279 (relative sequence number) Acknowledgement number: 895 (relative ack number) Header length: 32 bytes Flags: 0x0010 (ACK) Window size: 8352 (scaled) Checksum: 0xf2f1 [correct] Options: (12 bytes) SEQ/ACK analysis No. Time Source Destination Protocol Info 21 0.076907 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=48 Frame 21 (114 bytes on wire, 114 bytes captured) Ethernet II, Src: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67), Dst: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be) Internet Protocol, Src: 10.0.1.12 (10.0.1.12), Dst: 10.0.1.11 (10.0.1.11) Transmission Control Protocol, Src Port: 22 (22), Dst Port: 33549 (33549), Seq: 1279, Ack: 895, Len: 48 Source port: 22 (22) Destination port: 33549 (33549) Sequence number: 1279 (relative sequence number) Next sequence number: 1327 (relative sequence number) Acknowledgement number: 895 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 8352 (scaled) Checksum: 0x147a [correct] Options: (12 bytes) SSH Protocol No. Time Source Destination Protocol Info 22 0.077276 10.0.1.11 10.0.1.12 SSHv2 Encrypted request packet len=64 Frame 22 (130 bytes on wire, 130 bytes captured) Ethernet II, Src: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be), Dst: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67) Internet Protocol, Src: 10.0.1.11 (10.0.1.11), Dst: 10.0.1.12 (10.0.1.12) Transmission Control Protocol, Src Port: 33549 (33549), Dst Port: 22 (22), Seq: 895, Ack: 1327, Len: 64 Source port: 33549 (33549) Destination port: 22 (22) Sequence number: 895 (relative sequence number) Next sequence number: 959 (relative sequence number) Acknowledgement number: 1327 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 9680 (scaled) Checksum: 0x167d [incorrect, should be 0xaf32] Options: (12 bytes) SEQ/ACK analysis SSH Protocol No. Time Source Destination Protocol Info 23 0.079726 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=64 Frame 23 (130 bytes on wire, 130 bytes captured) Ethernet II, Src: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67), Dst: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be) Internet Protocol, Src: 10.0.1.12 (10.0.1.12), Dst: 10.0.1.11 (10.0.1.11) Transmission Control Protocol, Src Port: 22 (22), Dst Port: 33549 (33549), Seq: 1327, Ack: 959, Len: 64 Source port: 22 (22) Destination port: 33549 (33549) Sequence number: 1327 (relative sequence number) Next sequence number: 1391 (relative sequence number) Acknowledgement number: 959 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 8352 (scaled) Checksum: 0x8626 [correct] Options: (12 bytes) SEQ/ACK analysis SSH Protocol No. Time Source Destination Protocol Info 24 0.079852 10.0.1.11 10.0.1.12 SSHv2 Encrypted request packet len=96 Frame 24 (162 bytes on wire, 162 bytes captured) Ethernet II, Src: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be), Dst: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67) Internet Protocol, Src: 10.0.1.11 (10.0.1.11), Dst: 10.0.1.12 (10.0.1.12) Transmission Control Protocol, Src Port: 33549 (33549), Dst Port: 22 (22), Seq: 959, Ack: 1391, Len: 96 Source port: 33549 (33549) Destination port: 22 (22) Sequence number: 959 (relative sequence number) Next sequence number: 1055 (relative sequence number) Acknowledgement number: 1391 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 9680 (scaled) Checksum: 0x169d [incorrect, should be 0x9941] Options: (12 bytes) SEQ/ACK analysis SSH Protocol No. Time Source Destination Protocol Info 25 0.082923 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=64 Frame 25 (130 bytes on wire, 130 bytes captured) Ethernet II, Src: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67), Dst: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be) Internet Protocol, Src: 10.0.1.12 (10.0.1.12), Dst: 10.0.1.11 (10.0.1.11) Transmission Control Protocol, Src Port: 22 (22), Dst Port: 33549 (33549), Seq: 1391, Ack: 1055, Len: 64 Source port: 22 (22) Destination port: 33549 (33549) Sequence number: 1391 (relative sequence number) Next sequence number: 1455 (relative sequence number) Acknowledgement number: 1055 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 8352 (scaled) Checksum: 0xf3d0 [correct] Options: (12 bytes) SEQ/ACK analysis SSH Protocol No. Time Source Destination Protocol Info 26 0.123242 10.0.1.11 10.0.1.12 TCP 33549 > 22 [ACK] Seq=1055 Ack=1455 Win=9680 Len=0 TSV=8959382 TSER=4697471 Frame 26 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be), Dst: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67) Internet Protocol, Src: 10.0.1.11 (10.0.1.11), Dst: 10.0.1.12 (10.0.1.12) Transmission Control Protocol, Src Port: 33549 (33549), Dst Port: 22 (22), Seq: 1055, Ack: 1455, Len: 0 Source port: 33549 (33549) Destination port: 22 (22) Sequence number: 1055 (relative sequence number) Acknowledgement number: 1455 (relative ack number) Header length: 32 bytes Flags: 0x0010 (ACK) Window size: 9680 (scaled) Checksum: 0xf021 [correct] Options: (12 bytes) SEQ/ACK analysis No. Time Source Destination Protocol Info 27 2.099225 10.0.1.11 10.0.1.12 SSHv2 Encrypted request packet len=80 Frame 27 (146 bytes on wire, 146 bytes captured) Ethernet II, Src: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be), Dst: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67) Internet Protocol, Src: 10.0.1.11 (10.0.1.11), Dst: 10.0.1.12 (10.0.1.12) Transmission Control Protocol, Src Port: 33549 (33549), Dst Port: 22 (22), Seq: 1055, Ack: 1455, Len: 80 Source port: 33549 (33549) Destination port: 22 (22) Sequence number: 1055 (relative sequence number) Next sequence number: 1135 (relative sequence number) Acknowledgement number: 1455 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 9680 (scaled) Checksum: 0x168d [incorrect, should be 0xabaf] Options: (12 bytes) SSH Protocol No. Time Source Destination Protocol Info 28 2.101993 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=48 Frame 28 (114 bytes on wire, 114 bytes captured) Ethernet II, Src: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67), Dst: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be) Internet Protocol, Src: 10.0.1.12 (10.0.1.12), Dst: 10.0.1.11 (10.0.1.11) Transmission Control Protocol, Src Port: 22 (22), Dst Port: 33549 (33549), Seq: 1455, Ack: 1135, Len: 48 Source port: 22 (22) Destination port: 33549 (33549) Sequence number: 1455 (relative sequence number) Next sequence number: 1503 (relative sequence number) Acknowledgement number: 1135 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 8352 (scaled) Checksum: 0xcfad [correct] Options: (12 bytes) SEQ/ACK analysis SSH Protocol No. Time Source Destination Protocol Info 29 2.102028 10.0.1.11 10.0.1.12 TCP 33549 > 22 [ACK] Seq=1135 Ack=1503 Win=9680 Len=0 TSV=8961361 TSER=4699490 Frame 29 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be), Dst: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67) Internet Protocol, Src: 10.0.1.11 (10.0.1.11), Dst: 10.0.1.12 (10.0.1.12) Transmission Control Protocol, Src Port: 33549 (33549), Dst Port: 22 (22), Seq: 1135, Ack: 1503, Len: 0 Source port: 33549 (33549) Destination port: 22 (22) Sequence number: 1135 (relative sequence number) Acknowledgement number: 1503 (relative ack number) Header length: 32 bytes Flags: 0x0010 (ACK) Window size: 9680 (scaled) Checksum: 0xe003 [correct] Options: (12 bytes) SEQ/ACK analysis No. Time Source Destination Protocol Info 30 2.102241 10.0.1.11 10.0.1.12 SSHv2 Encrypted request packet len=80 Frame 30 (146 bytes on wire, 146 bytes captured) Ethernet II, Src: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be), Dst: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67) Internet Protocol, Src: 10.0.1.11 (10.0.1.11), Dst: 10.0.1.12 (10.0.1.12) Transmission Control Protocol, Src Port: 33549 (33549), Dst Port: 22 (22), Seq: 1135, Ack: 1503, Len: 80 Source port: 33549 (33549) Destination port: 22 (22) Sequence number: 1135 (relative sequence number) Next sequence number: 1215 (relative sequence number) Acknowledgement number: 1503 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 9680 (scaled) Checksum: 0x168d [incorrect, should be 0xa747] Options: (12 bytes) SSH Protocol No. Time Source Destination Protocol Info 31 2.103172 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=32 Frame 31 (98 bytes on wire, 98 bytes captured) Ethernet II, Src: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67), Dst: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be) Internet Protocol, Src: 10.0.1.12 (10.0.1.12), Dst: 10.0.1.11 (10.0.1.11) Transmission Control Protocol, Src Port: 22 (22), Dst Port: 33549 (33549), Seq: 1503, Ack: 1215, Len: 32 Source port: 22 (22) Destination port: 33549 (33549) Sequence number: 1503 (relative sequence number) Next sequence number: 1535 (relative sequence number) Acknowledgement number: 1215 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 8352 (scaled) Checksum: 0x125f [correct] Options: (12 bytes) SEQ/ACK analysis SSH Protocol No. Time Source Destination Protocol Info 32 2.103455 10.0.1.11 10.0.1.12 SSHv2 Encrypted request packet len=64 Frame 32 (130 bytes on wire, 130 bytes captured) Ethernet II, Src: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be), Dst: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67) Internet Protocol, Src: 10.0.1.11 (10.0.1.11), Dst: 10.0.1.12 (10.0.1.12) Transmission Control Protocol, Src Port: 33549 (33549), Dst Port: 22 (22), Seq: 1215, Ack: 1535, Len: 64 Source port: 33549 (33549) Destination port: 22 (22) Sequence number: 1215 (relative sequence number) Next sequence number: 1279 (relative sequence number) Acknowledgement number: 1535 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 9680 (scaled) Checksum: 0x167d [incorrect, should be 0x015d] Options: (12 bytes) SEQ/ACK analysis SSH Protocol No. Time Source Destination Protocol Info 33 2.104506 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=48 Frame 33 (114 bytes on wire, 114 bytes captured) Ethernet II, Src: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67), Dst: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be) Internet Protocol, Src: 10.0.1.12 (10.0.1.12), Dst: 10.0.1.11 (10.0.1.11) Transmission Control Protocol, Src Port: 22 (22), Dst Port: 33549 (33549), Seq: 1535, Ack: 1279, Len: 48 Source port: 22 (22) Destination port: 33549 (33549) Sequence number: 1535 (relative sequence number) Next sequence number: 1583 (relative sequence number) Acknowledgement number: 1279 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 8352 (scaled) Checksum: 0xd6d2 [correct] Options: (12 bytes) SEQ/ACK analysis SSH Protocol No. Time Source Destination Protocol Info 34 2.104717 10.0.1.11 10.0.1.12 SSHv2 Encrypted request packet len=384 Frame 34 (450 bytes on wire, 450 bytes captured) Ethernet II, Src: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be), Dst: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67) Internet Protocol, Src: 10.0.1.11 (10.0.1.11), Dst: 10.0.1.12 (10.0.1.12) Transmission Control Protocol, Src Port: 33549 (33549), Dst Port: 22 (22), Seq: 1279, Ack: 1583, Len: 384 Source port: 33549 (33549) Destination port: 22 (22) Sequence number: 1279 (relative sequence number) Next sequence number: 1663 (relative sequence number) Acknowledgement number: 1583 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 9680 (scaled) Checksum: 0x17bd [incorrect, should be 0xabd9] Options: (12 bytes) SEQ/ACK analysis SSH Protocol No. Time Source Destination Protocol Info 35 2.125009 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=48 Frame 35 (114 bytes on wire, 114 bytes captured) Ethernet II, Src: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67), Dst: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be) Internet Protocol, Src: 10.0.1.12 (10.0.1.12), Dst: 10.0.1.11 (10.0.1.11) Transmission Control Protocol, Src Port: 22 (22), Dst Port: 33549 (33549), Seq: 1583, Ack: 1663, Len: 48 Source port: 22 (22) Destination port: 33549 (33549) Sequence number: 1583 (relative sequence number) Next sequence number: 1631 (relative sequence number) Acknowledgement number: 1663 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 9632 (scaled) Checksum: 0xf213 [correct] Options: (12 bytes) SEQ/ACK analysis SSH Protocol No. Time Source Destination Protocol Info 36 2.125154 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=96 Frame 36 (162 bytes on wire, 162 bytes captured) Ethernet II, Src: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67), Dst: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be) Internet Protocol, Src: 10.0.1.12 (10.0.1.12), Dst: 10.0.1.11 (10.0.1.11) Transmission Control Protocol, Src Port: 22 (22), Dst Port: 33549 (33549), Seq: 1631, Ack: 1663, Len: 96 Source port: 22 (22) Destination port: 33549 (33549) Sequence number: 1631 (relative sequence number) Next sequence number: 1727 (relative sequence number) Acknowledgement number: 1663 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 9632 (scaled) Checksum: 0xe82b [correct] Options: (12 bytes) SSH Protocol No. Time Source Destination Protocol Info 37 2.164894 10.0.1.11 10.0.1.12 TCP 33549 > 22 [ACK] Seq=1663 Ack=1727 Win=9680 Len=0 TSV=8961424 TSER=4699513 Frame 37 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be), Dst: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67) Internet Protocol, Src: 10.0.1.11 (10.0.1.11), Dst: 10.0.1.12 (10.0.1.12) Transmission Control Protocol, Src Port: 33549 (33549), Dst Port: 22 (22), Seq: 1663, Ack: 1727, Len: 0 Source port: 33549 (33549) Destination port: 22 (22) Sequence number: 1663 (relative sequence number) Acknowledgement number: 1727 (relative ack number) Header length: 32 bytes Flags: 0x0010 (ACK) Window size: 9680 (scaled) Checksum: 0xdcbd [correct] Options: (12 bytes) SEQ/ACK analysis No. Time Source Destination Protocol Info 38 2.165163 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=80 Frame 38 (146 bytes on wire, 146 bytes captured) Ethernet II, Src: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67), Dst: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be) Internet Protocol, Src: 10.0.1.12 (10.0.1.12), Dst: 10.0.1.11 (10.0.1.11) Transmission Control Protocol, Src Port: 22 (22), Dst Port: 33549 (33549), Seq: 1727, Ack: 1663, Len: 80 Source port: 22 (22) Destination port: 33549 (33549) Sequence number: 1727 (relative sequence number) Next sequence number: 1807 (relative sequence number) Acknowledgement number: 1663 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 9632 (scaled) Checksum: 0x89e6 [correct] Options: (12 bytes) SSH Protocol No. Time Source Destination Protocol Info 39 2.165186 10.0.1.11 10.0.1.12 TCP 33549 > 22 [ACK] Seq=1663 Ack=1807 Win=9680 Len=0 TSV=8961424 TSER=4699554 Frame 39 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be), Dst: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67) Internet Protocol, Src: 10.0.1.11 (10.0.1.11), Dst: 10.0.1.12 (10.0.1.12) Transmission Control Protocol, Src Port: 33549 (33549), Dst Port: 22 (22), Seq: 1663, Ack: 1807, Len: 0 Source port: 33549 (33549) Destination port: 22 (22) Sequence number: 1663 (relative sequence number) Acknowledgement number: 1807 (relative ack number) Header length: 32 bytes Flags: 0x0010 (ACK) Window size: 9680 (scaled) Checksum: 0xdc44 [correct] Options: (12 bytes) SEQ/ACK analysis No. Time Source Destination Protocol Info 40 14.544061 10.0.1.11 10.0.1.12 SSHv2 Encrypted request packet len=48 Frame 40 (114 bytes on wire, 114 bytes captured) Ethernet II, Src: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be), Dst: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67) Internet Protocol, Src: 10.0.1.11 (10.0.1.11), Dst: 10.0.1.12 (10.0.1.12) Transmission Control Protocol, Src Port: 33549 (33549), Dst Port: 22 (22), Seq: 1663, Ack: 1807, Len: 48 Source port: 33549 (33549) Destination port: 22 (22) Sequence number: 1663 (relative sequence number) Next sequence number: 1711 (relative sequence number) Acknowledgement number: 1807 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 9680 (scaled) Checksum: 0x166d [incorrect, should be 0x9dc9] Options: (12 bytes) SSH Protocol No. Time Source Destination Protocol Info 41 14.544614 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=48 Frame 41 (114 bytes on wire, 114 bytes captured) Ethernet II, Src: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67), Dst: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be) Internet Protocol, Src: 10.0.1.12 (10.0.1.12), Dst: 10.0.1.11 (10.0.1.11) Transmission Control Protocol, Src Port: 22 (22), Dst Port: 33549 (33549), Seq: 1807, Ack: 1711, Len: 48 Source port: 22 (22) Destination port: 33549 (33549) Sequence number: 1807 (relative sequence number) Next sequence number: 1855 (relative sequence number) Acknowledgement number: 1711 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 9632 (scaled) Checksum: 0x214a [correct] Options: (12 bytes) SEQ/ACK analysis SSH Protocol No. Time Source Destination Protocol Info 42 14.544642 10.0.1.11 10.0.1.12 TCP 33549 > 22 [ACK] Seq=1711 Ack=1855 Win=9680 Len=0 TSV=8973806 TSER=4711935 Frame 42 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be), Dst: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67) Internet Protocol, Src: 10.0.1.11 (10.0.1.11), Dst: 10.0.1.12 (10.0.1.12) Transmission Control Protocol, Src Port: 33549 (33549), Dst Port: 22 (22), Seq: 1711, Ack: 1855, Len: 0 Source port: 33549 (33549) Destination port: 22 (22) Sequence number: 1711 (relative sequence number) Acknowledgement number: 1855 (relative ack number) Header length: 32 bytes Flags: 0x0010 (ACK) Window size: 9680 (scaled) Checksum: 0x7b29 [correct] Options: (12 bytes) SEQ/ACK analysis No. Time Source Destination Protocol Info 43 16.156933 10.0.1.11 10.0.1.12 SSHv2 Encrypted request packet len=48 Frame 43 (114 bytes on wire, 114 bytes captured) Ethernet II, Src: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be), Dst: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67) Internet Protocol, Src: 10.0.1.11 (10.0.1.11), Dst: 10.0.1.12 (10.0.1.12) Transmission Control Protocol, Src Port: 33549 (33549), Dst Port: 22 (22), Seq: 1711, Ack: 1855, Len: 48 Source port: 33549 (33549) Destination port: 22 (22) Sequence number: 1711 (relative sequence number) Next sequence number: 1759 (relative sequence number) Acknowledgement number: 1855 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 9680 (scaled) Checksum: 0x166d [incorrect, should be 0xfa42] Options: (12 bytes) SSH Protocol No. Time Source Destination Protocol Info 44 16.157459 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=48 Frame 44 (114 bytes on wire, 114 bytes captured) Ethernet II, Src: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67), Dst: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be) Internet Protocol, Src: 10.0.1.12 (10.0.1.12), Dst: 10.0.1.11 (10.0.1.11) Transmission Control Protocol, Src Port: 22 (22), Dst Port: 33549 (33549), Seq: 1855, Ack: 1759, Len: 48 Source port: 22 (22) Destination port: 33549 (33549) Sequence number: 1855 (relative sequence number) Next sequence number: 1903 (relative sequence number) Acknowledgement number: 1759 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 9632 (scaled) Checksum: 0x5797 [correct] Options: (12 bytes) SEQ/ACK analysis SSH Protocol No. Time Source Destination Protocol Info 45 16.157496 10.0.1.11 10.0.1.12 TCP 33549 > 22 [ACK] Seq=1759 Ack=1903 Win=9680 Len=0 TSV=8975419 TSER=4713548 Frame 45 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be), Dst: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67) Internet Protocol, Src: 10.0.1.11 (10.0.1.11), Dst: 10.0.1.12 (10.0.1.12) Transmission Control Protocol, Src Port: 33549 (33549), Dst Port: 22 (22), Seq: 1759, Ack: 1903, Len: 0 Source port: 33549 (33549) Destination port: 22 (22) Sequence number: 1759 (relative sequence number) Acknowledgement number: 1903 (relative ack number) Header length: 32 bytes Flags: 0x0010 (ACK) Window size: 9680 (scaled) Checksum: 0x6e2f [correct] Options: (12 bytes) SEQ/ACK analysis No. Time Source Destination Protocol Info 46 16.967676 10.0.1.11 10.0.1.12 SSHv2 Encrypted request packet len=48 Frame 46 (114 bytes on wire, 114 bytes captured) Ethernet II, Src: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be), Dst: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67) Internet Protocol, Src: 10.0.1.11 (10.0.1.11), Dst: 10.0.1.12 (10.0.1.12) Transmission Control Protocol, Src Port: 33549 (33549), Dst Port: 22 (22), Seq: 1759, Ack: 1903, Len: 48 Source port: 33549 (33549) Destination port: 22 (22) Sequence number: 1759 (relative sequence number) Next sequence number: 1807 (relative sequence number) Acknowledgement number: 1903 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 9680 (scaled) Checksum: 0x166d [incorrect, should be 0x9c21] Options: (12 bytes) SSH Protocol No. Time Source Destination Protocol Info 47 16.968215 10.0.1.12 10.0.1.11 SSHv2 Encrypted response packet len=48 Frame 47 (114 bytes on wire, 114 bytes captured) Ethernet II, Src: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67), Dst: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be) Internet Protocol, Src: 10.0.1.12 (10.0.1.12), Dst: 10.0.1.11 (10.0.1.11) Transmission Control Protocol, Src Port: 22 (22), Dst Port: 33549 (33549), Seq: 1903, Ack: 1807, Len: 48 Source port: 22 (22) Destination port: 33549 (33549) Sequence number: 1903 (relative sequence number) Next sequence number: 1951 (relative sequence number) Acknowledgement number: 1807 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) Window size: 9632 (scaled) Checksum: 0x0bb0 [correct] Options: (12 bytes) SEQ/ACK analysis SSH Protocol No. Time Source Destination Protocol Info 48 16.968242 10.0.1.11 10.0.1.12 TCP 33549 > 22 [ACK] Seq=1807 Ack=1951 Win=9680 Len=0 TSV=8976230 TSER=4714359 Frame 48 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 00:e0:4c:78:c2:be (00:e0:4c:78:c2:be), Dst: 00:e0:4c:78:bf:67 (00:e0:4c:78:bf:67) Internet Protocol, Src: 10.0.1.11 (10.0.1.11), Dst: 10.0.1.12 (10.0.1.12) Transmission Control Protocol, Src Port: 33549 (33549), Dst Port: 22 (22), Seq: 1807, Ack: 1951, Len: 0 Source port: 33549 (33549) Destination port: 22 (22) Sequence number: 1807 (relative sequence number) Acknowledgement number: 1951 (relative ack number) Header length: 32 bytes Flags: 0x0010 (ACK) Window size: 9680 (scaled) Checksum: 0x6779 [correct] Options: (12 bytes) SEQ/ACK analysis