Post a reply

Before posting, please read how to report bug or request support effectively.

Bug reports without an attached log file are usually useless.

Options
Add an Attachment

If you do not want to add an Attachment to your Post, please leave the Fields blank.

(maximum 10 MB; please compress large files; only common media, archive, text and programming file formats are allowed)

Options

Topic review

Gman

Re: SFTP failing - TCP Reset occuring

I have created a work-around by adding a loop to my batch file to retry the SFTP transfer 10 times. So far, this is working. This could be a router config issue on one or more ends of the conversation, or some incompatibility between what WinSCP is doing and OpenSSH 5.1, which is what I see when it DOES connect. Not sure.
Guest

Re: SFTP failing - TCP Reset occuring

Sorry. I have the WireShark traces, but not allowed to send them due to security concerns. Anything I can look for? Any ideas?
Guest

Re: SFTP failing - TCP Reset occuring

I'm not sure I kept them. I will take a look.
martin

Re: SFTP failing - TCP Reset occuring

Can you email me the wireshark files?

You will find my address (if you log in) in my forum profile.
Gman

SFTP failing - TCP Reset occuring

I am using winscript interface and get random SFTP failures. Sometimes this works for 2 weeks, then fails. Other times it fails every couple of days. The vendor and I have done some troubleshooting on this. We setup traces on our routers and found we were doing a TCP RST on our end during negotiation. So, I setup a WireShark trace on our host, and had my programmer drop files into the host, which automatically start winscp scripts.

Below shows: 1) WinSCP script log showing OPEN failure, 2) snippet of the WireShark trace when SFTP successful, and, 3) snippet of the WireShark trace when SFTP unsuccessful.

I am NOT a network engineer, but what I see is the sequence of: SYN>SYN,ACK>ACK>OpenSSH occuring when SFTP's are successful. But on the last trace entry #10512 at 14:32:24.373573, this is where the conversation fails when WinSCP sends an "RST,ACK" where I would have expected WinSCP to respond with a "SSH-2.0-WinSCP...".

I apologize that the WinSCP script log timestamps do not correspond to the trace. I wasn't able to capture the log that went with the trace, but I can assure ALL the failure logs are exactly the same; 21 or 22 seconds after the OPEN and then POOF!

Also, since gathering the info below, I upgraded WinSCP client to 4.3.2 on 2/4/2011 but failures still occur.

Thanks Martin for analyzing this. I've taken this as far as I can and am hoping you can provide a solution...



------------------------------------------------------------------------
WinSCP script log:
. 2011-02-03 21:28:08.951 --------------------------------------------------------------------------
. 2011-02-03 21:28:08.951 WinSCP Version 4.2.1 (Build 428) (OS 6.0.6002 Service Pack 2)
. 2011-02-03 21:28:08.951 Login time: Thursday, February 03, 2011 9:28:08 PM
. 2011-02-03 21:28:08.951 --------------------------------------------------------------------------
. 2011-02-03 21:28:08.951 Session name: Username@vendor_site.com
. 2011-02-03 21:28:08.951 Host name: vendor_site.com (Port: 22)
. 2011-02-03 21:28:08.951 User name: Username (Password: Yes, Key file: No)
. 2011-02-03 21:28:08.951 Tunnel: No
. 2011-02-03 21:28:08.951 Transfer Protocol: SFTP (SCP)
. 2011-02-03 21:28:08.951 Ping type: -, Ping interval: 30 sec; Timeout: 120 sec
. 2011-02-03 21:28:08.951 Proxy: none
. 2011-02-03 21:28:08.951 SSH protocol version: 2; Compression: No
. 2011-02-03 21:28:08.951 Bypass authentication: No
. 2011-02-03 21:28:08.951 Try agent: Yes; Agent forwarding: No; TIS/CryptoCard: No; KI: Yes; GSSAPI: No
. 2011-02-03 21:28:08.951 Ciphers: aes,blowfish,3des,WARN,arcfour,des; Ssh2DES: No
. 2011-02-03 21:28:08.951 SSH Bugs: -,-,-,-,-,-,-,-,-
. 2011-02-03 21:28:08.951 SFTP Bugs: -,-
. 2011-02-03 21:28:08.951 Return code variable: Autodetect; Lookup user groups: Yes
. 2011-02-03 21:28:08.951 Shell: default, EOL: 0
. 2011-02-03 21:28:08.951 Clear aliases: Yes, Unset nat.vars: Yes, Resolve symlinks: Yes
. 2011-02-03 21:28:08.951 LS: ls -la, Ign LS warn: Yes, Scp1 Comp: No
. 2011-02-03 21:28:08.951 Local directory: default, Remote directory: home, Update: No, Cache: Yes
. 2011-02-03 21:28:08.951 Cache directory changes: Yes, Permanent: Yes
. 2011-02-03 21:28:08.951 DST mode: 1
. 2011-02-03 21:28:08.951 --------------------------------------------------------------------------
. 2011-02-03 21:28:08.951 Looking up host "vendor_site.com"
. 2011-02-03 21:28:09.279 Connecting to XXX.XXX.XXX.XXX port 22
. 2011-02-03 21:28:30.277 Failed to connect to XXX.XXX.XXX.XXX: Network error: Connection timed out
. 2011-02-03 21:28:30.277 Connecting to XXX.XXX.XXX.XXX port 22
. 2011-02-03 21:28:30.292 Selecting events 63 for socket 1380
. 2011-02-03 21:28:30.292 Attempt to close connection due to fatal exception:
* 2011-02-03 21:28:30.292 Network error: Connection timed out.
. 2011-02-03 21:28:30.292 Closing connection.
. 2011-02-03 21:28:30.292 Sending special code: 12


------------------------------------------------------------------------
Trace of successful SFTP:

No. Time Source Destination Protocol Info
2921 14:12:17.681622 Our_IP Their_IP TCP 56111 > ssh [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=8

Frame 2921 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 0, Len: 0

No. Time Source Destination Protocol Info
2922 14:12:17.700290 Their_IP Our_IP TCP ssh > 56111 [SYN, ACK] Seq=0 Ack=1 Win=49680 Len=0 MSS=1380 WS=0

Frame 2922 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 0, Ack: 1, Len: 0

No. Time Source Destination Protocol Info
2923 14:12:17.700308 Our_IP Their_IP TCP 56111 > ssh [ACK] Seq=1 Ack=1 Win=66048 Len=0

Frame 2923 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info
2924 14:12:17.745412 Their_IP Our_IP SSHv2 Server Protocol: SSH-2.0-OpenSSH_5.1\r

Frame 2924 (75 bytes on wire, 75 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 1, Ack: 1, Len: 21
SSH Protocol

No. Time Source Destination Protocol Info
2925 14:12:17.745738 Our_IP Their_IP SSHv2 Client Protocol: SSH-2.0-WinSCP_release_4.2.1\r

Frame 2925 (84 bytes on wire, 84 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1, Ack: 22, Len: 30
SSH Protocol

No. Time Source Destination Protocol Info
2926 14:12:17.762769 Their_IP Our_IP TCP ssh > 56111 [ACK] Seq=22 Ack=31 Win=49680 Len=0

Frame 2926 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 22, Ack: 31, Len: 0

No. Time Source Destination Protocol Info
2927 14:12:17.762777 Our_IP Their_IP SSHv2 Client: Key Exchange Init

Frame 2927 (662 bytes on wire, 662 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 31, Ack: 22, Len: 608
SSH Protocol

No. Time Source Destination Protocol Info
2928 14:12:17.768164 Their_IP Our_IP SSHv2 Server: Key Exchange Init

Frame 2928 (838 bytes on wire, 838 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 22, Ack: 31, Len: 784
SSH Protocol

No. Time Source Destination Protocol Info
2929 14:12:17.780456 Their_IP Our_IP TCP ssh > 56111 [ACK] Seq=806 Ack=639 Win=49680 Len=0

Frame 2929 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 806, Ack: 639, Len: 0

No. Time Source Destination Protocol Info
2930 14:12:17.780464 Our_IP Their_IP SSHv2 Client: Diffie-Hellman Key Exchange Init

Frame 2930 (70 bytes on wire, 70 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 639, Ack: 806, Len: 16
SSH Protocol

No. Time Source Destination Protocol Info
2931 14:12:17.811980 Their_IP Our_IP SSHv2 Server: Diffie-Hellman Key Exchange Reply

Frame 2931 (334 bytes on wire, 334 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 806, Ack: 655, Len: 280
SSH Protocol

No. Time Source Destination Protocol Info
2933 14:12:17.880833 Our_IP Their_IP SSHv2 Client: Diffie-Hellman GEX Init

Frame 2933 (326 bytes on wire, 326 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 655, Ack: 1086, Len: 272
SSH Protocol

No. Time Source Destination Protocol Info
2934 14:12:17.960931 Their_IP Our_IP TCP ssh > 56111 [ACK] Seq=1086 Ack=927 Win=49680 Len=0

Frame 2934 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 1086, Ack: 927, Len: 0

No. Time Source Destination Protocol Info
2936 14:12:18.004061 Their_IP Our_IP SSHv2 Server: Diffie-Hellman GEX Reply

Frame 2936 (902 bytes on wire, 902 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 1086, Ack: 927, Len: 848
SSH Protocol

No. Time Source Destination Protocol Info
2937 14:12:18.078545 Our_IP Their_IP SSHv2 Client: New Keys

Frame 2937 (70 bytes on wire, 70 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 927, Ack: 1934, Len: 16
SSH Protocol

No. Time Source Destination Protocol Info
2938 14:12:18.160743 Their_IP Our_IP TCP ssh > 56111 [ACK] Seq=1934 Ack=943 Win=49680 Len=0

Frame 2938 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 1934, Ack: 943, Len: 0

No. Time Source Destination Protocol Info
2939 14:12:18.160752 Our_IP Their_IP SSHv2 Encrypted request packet len=52

Frame 2939 (106 bytes on wire, 106 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 943, Ack: 1934, Len: 52
SSH Protocol

No. Time Source Destination Protocol Info
2940 14:12:18.179123 Their_IP Our_IP SSHv2 Encrypted response packet len=52

Frame 2940 (106 bytes on wire, 106 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 1934, Ack: 995, Len: 52
SSH Protocol

No. Time Source Destination Protocol Info
2941 14:12:18.179358 Our_IP Their_IP SSHv2 Encrypted request packet len=68

Frame 2941 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 995, Ack: 1986, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2943 14:12:18.210002 Their_IP Our_IP SSHv2 Encrypted response packet len=84

Frame 2943 (138 bytes on wire, 138 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 1986, Ack: 1063, Len: 84
SSH Protocol

No. Time Source Destination Protocol Info
2944 14:12:18.210191 Our_IP Their_IP SSHv2 Encrypted request packet len=100

Frame 2944 (154 bytes on wire, 154 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1063, Ack: 2070, Len: 100
SSH Protocol

No. Time Source Destination Protocol Info
2946 14:12:18.227346 Their_IP Our_IP SSHv2 Encrypted response packet len=84

Frame 2946 (138 bytes on wire, 138 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 2070, Ack: 1163, Len: 84
SSH Protocol

No. Time Source Destination Protocol Info
2947 14:12:18.227811 Our_IP Their_IP SSHv2 Encrypted request packet len=296

Frame 2947 (350 bytes on wire, 350 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1163, Ack: 2154, Len: 296
SSH Protocol

No. Time Source Destination Protocol Info
2948 14:12:18.247942 Their_IP Our_IP SSHv2 Encrypted response packet len=36

Frame 2948 (90 bytes on wire, 90 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 2154, Ack: 1459, Len: 36
SSH Protocol

No. Time Source Destination Protocol Info
2949 14:12:18.248113 Our_IP Their_IP SSHv2 Encrypted request packet len=68

Frame 2949 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1459, Ack: 2190, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2950 14:12:18.265226 Their_IP Our_IP SSHv2 Encrypted response packet len=52

Frame 2950 (106 bytes on wire, 106 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 2190, Ack: 1527, Len: 52
SSH Protocol

No. Time Source Destination Protocol Info
2951 14:12:18.265411 Our_IP Their_IP SSHv2 Encrypted request packet len=84

Frame 2951 (138 bytes on wire, 138 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1527, Ack: 2242, Len: 84
SSH Protocol

No. Time Source Destination Protocol Info
2952 14:12:18.310543 Their_IP Our_IP TCP ssh > 56111 [ACK] Seq=2242 Ack=1611 Win=49680 Len=0

Frame 2952 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 2242, Ack: 1611, Len: 0

No. Time Source Destination Protocol Info
2953 14:12:18.310552 Our_IP Their_IP SSHv2 Encrypted request packet len=68

Frame 2953 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1611, Ack: 2242, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2954 14:12:18.329068 Their_IP Our_IP SSHv2 Encrypted response packet len=88

Frame 2954 (142 bytes on wire, 142 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 2242, Ack: 1679, Len: 88
SSH Protocol

No. Time Source Destination Protocol Info
2955 14:12:18.329566 Our_IP Their_IP SSHv2 Encrypted request packet len=52

Frame 2955 (106 bytes on wire, 106 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1679, Ack: 2330, Len: 52
SSH Protocol

No. Time Source Destination Protocol Info
2957 14:12:18.390798 Their_IP Our_IP TCP ssh > 56111 [ACK] Seq=2330 Ack=1731 Win=49680 Len=0

Frame 2957 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 2330, Ack: 1731, Len: 0

No. Time Source Destination Protocol Info
2958 14:12:18.443267 Their_IP Our_IP SSHv2 Encrypted response packet len=148

Frame 2958 (202 bytes on wire, 202 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 2330, Ack: 1731, Len: 148
SSH Protocol

No. Time Source Destination Protocol Info
2959 14:12:18.444251 Our_IP Their_IP SSHv2 Encrypted request packet len=52

Frame 2959 (106 bytes on wire, 106 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1731, Ack: 2478, Len: 52
SSH Protocol

No. Time Source Destination Protocol Info
2960 14:12:18.461693 Their_IP Our_IP SSHv2 Encrypted response packet len=100

Frame 2960 (154 bytes on wire, 154 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 2478, Ack: 1783, Len: 100
SSH Protocol

No. Time Source Destination Protocol Info
2961 14:12:18.462528 Our_IP Their_IP SSHv2 Encrypted request packet len=68

Frame 2961 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1783, Ack: 2578, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2962 14:12:18.481243 Their_IP Our_IP SSHv2 Encrypted response packet len=68

Frame 2962 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 2578, Ack: 1851, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2963 14:12:18.481599 Our_IP Their_IP SSHv2 Encrypted request packet len=68

Frame 2963 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1851, Ack: 2646, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2965 14:12:18.531154 Their_IP Our_IP TCP ssh > 56111 [ACK] Seq=2646 Ack=1919 Win=49680 Len=0

Frame 2965 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 2646, Ack: 1919, Len: 0

No. Time Source Destination Protocol Info
2967 14:12:18.564488 Their_IP Our_IP SSHv2 Encrypted response packet len=1380

Frame 2967 (1434 bytes on wire, 1434 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 2646, Ack: 1919, Len: 1380
SSH Protocol

No. Time Source Destination Protocol Info
2968 14:12:18.564676 Their_IP Our_IP SSHv2 Encrypted response packet len=1380

Frame 2968 (1434 bytes on wire, 1434 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 4026, Ack: 1919, Len: 1380
SSH Protocol

No. Time Source Destination Protocol Info
2969 14:12:18.564683 Our_IP Their_IP TCP 56111 > ssh [ACK] Seq=1919 Ack=5406 Win=66048 Len=0

Frame 2969 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1919, Ack: 5406, Len: 0

No. Time Source Destination Protocol Info
2970 14:12:18.564692 Their_IP Our_IP SSHv2 Encrypted response packet len=620

Frame 2970 (674 bytes on wire, 674 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 5406, Ack: 1919, Len: 620
SSH Protocol

No. Time Source Destination Protocol Info
2971 14:12:18.575437 Our_IP Their_IP SSHv2 Encrypted request packet len=68

Frame 2971 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1919, Ack: 6026, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2972 14:12:18.593114 Their_IP Our_IP SSHv2 Encrypted response packet len=84

Frame 2972 (138 bytes on wire, 138 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 6026, Ack: 1987, Len: 84
SSH Protocol

No. Time Source Destination Protocol Info
2973 14:12:18.593734 Our_IP Their_IP SSHv2 Encrypted request packet len=68

Frame 2973 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1987, Ack: 6110, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2974 14:12:18.611234 Their_IP Our_IP SSHv2 Encrypted response packet len=68

Frame 2974 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 6110, Ack: 2055, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2975 14:12:18.611246 Our_IP Their_IP SSHv2 Encrypted request packet len=68

Frame 2975 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 2055, Ack: 6178, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2976 14:12:18.629442 Their_IP Our_IP SSHv2 Encrypted response packet len=68

Frame 2976 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 6178, Ack: 2123, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2977 14:12:18.629955 Our_IP Their_IP SSHv2 Encrypted request packet len=68

Frame 2977 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 2123, Ack: 6246, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2978 14:12:18.660714 Their_IP Our_IP TCP ssh > 56111 [ACK] Seq=6246 Ack=2191 Win=49680 Len=0

Frame 2978 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 6246, Ack: 2191, Len: 0

No. Time Source Destination Protocol Info
2979 14:12:18.708191 Their_IP Our_IP SSHv2 Encrypted response packet len=1380

Frame 2979 (1434 bytes on wire, 1434 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 6246, Ack: 2191, Len: 1380
SSH Protocol

No. Time Source Destination Protocol Info
2980 14:12:18.708442 Their_IP Our_IP SSHv2 Encrypted response packet len=1380

Frame 2980 (1434 bytes on wire, 1434 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 7626, Ack: 2191, Len: 1380
SSH Protocol

No. Time Source Destination Protocol Info
2981 14:12:18.708448 Our_IP Their_IP TCP 56111 > ssh [ACK] Seq=2191 Ack=9006 Win=66048 Len=0

Frame 2981 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 2191, Ack: 9006, Len: 0

No. Time Source Destination Protocol Info
2982 14:12:18.708453 Their_IP Our_IP SSHv2 Encrypted response packet len=620

Frame 2982 (674 bytes on wire, 674 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 9006, Ack: 2191, Len: 620
SSH Protocol

No. Time Source Destination Protocol Info
2983 14:12:18.719229 Our_IP Their_IP SSHv2 Encrypted request packet len=68

Frame 2983 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 2191, Ack: 9626, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2984 14:12:18.736219 Their_IP Our_IP SSHv2 Encrypted response packet len=84

Frame 2984 (138 bytes on wire, 138 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 9626, Ack: 2259, Len: 84
SSH Protocol

No. Time Source Destination Protocol Info
2985 14:12:18.736841 Our_IP Their_IP SSHv2 Encrypted request packet len=68

Frame 2985 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 2259, Ack: 9710, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2986 14:12:18.753583 Their_IP Our_IP SSHv2 Encrypted response packet len=68

Frame 2986 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 9710, Ack: 2327, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2987 14:12:18.753595 Our_IP Their_IP SSHv2 Encrypted request packet len=116

Frame 2987 (170 bytes on wire, 170 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 2327, Ack: 9778, Len: 116
SSH Protocol

No. Time Source Destination Protocol Info
2988 14:12:18.791283 Their_IP Our_IP TCP ssh > 56111 [ACK] Seq=9778 Ack=2443 Win=49680 Len=0

Frame 2988 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 9778, Ack: 2443, Len: 0

No. Time Source Destination Protocol Info
2989 14:12:18.791284 Their_IP Our_IP SSHv2 Encrypted response packet len=68

Frame 2989 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 9778, Ack: 2443, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2990 14:12:18.791956 Our_IP Their_IP SSHv2 Encrypted request packet len=100

Frame 2990 (154 bytes on wire, 154 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 2443, Ack: 9846, Len: 100
SSH Protocol

No. Time Source Destination Protocol Info
2991 14:12:18.809581 Their_IP Our_IP SSHv2 Encrypted response packet len=68

Frame 2991 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 9846, Ack: 2543, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2992 14:12:18.809593 Our_IP Their_IP SSHv2 Encrypted request packet len=168

Frame 2992 (222 bytes on wire, 222 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 2543, Ack: 9914, Len: 168
SSH Protocol

No. Time Source Destination Protocol Info
2993 14:12:18.834030 Their_IP Our_IP SSHv2 Encrypted response packet len=68

Frame 2993 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 9914, Ack: 2711, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2994 14:12:18.839043 Their_IP Our_IP SSHv2 Encrypted response packet len=68

Frame 2994 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 9982, Ack: 2711, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2995 14:12:18.839049 Our_IP Their_IP TCP 56111 > ssh [ACK] Seq=2711 Ack=10050 Win=65024 Len=0

Frame 2995 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 2711, Ack: 10050, Len: 0

No. Time Source Destination Protocol Info
2996 14:12:18.839869 Our_IP Their_IP SSHv2 Encrypted request packet len=36

Frame 2996 (90 bytes on wire, 90 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 2711, Ack: 10050, Len: 36
SSH Protocol

No. Time Source Destination Protocol Info
2997 14:12:18.839990 Our_IP Their_IP TCP 56111 > ssh [FIN, ACK] Seq=2747 Ack=10050 Win=65024 Len=0

Frame 2997 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 2747, Ack: 10050, Len: 0

No. Time Source Destination Protocol Info
3002 14:12:18.856555 Their_IP Our_IP TCP ssh > 56111 [ACK] Seq=10050 Ack=2748 Win=49680 Len=0

Frame 3002 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 10050, Ack: 2748, Len: 0

No. Time Source Destination Protocol Info
3003 14:12:18.856837 Their_IP Our_IP TCP ssh > 56111 [FIN, ACK] Seq=10050 Ack=2748 Win=49680 Len=0

Frame 3003 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 10050, Ack: 2748, Len: 0

No. Time Source Destination Protocol Info
3004 14:12:18.856847 Our_IP Their_IP TCP 56111 > ssh [ACK] Seq=2748 Ack=10051 Win=65024 Len=0

Frame 3004 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 2748, Ack: 10051, Len: 0



----------------------------------------------------------------------
Trace of UNsuccessful SFTP:



No. Time Source Destination Protocol Info
10503 14:32:24.315286 Our_IP Their_IP TCP 56184 > ssh [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=8

Frame 10503 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:01 (00:07:b4:00:78:01)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56184 (56184), Dst Port: ssh (22), Seq: 0, Len: 0

No. Time Source Destination Protocol Info
10504 14:32:24.332425 Their_IP Our_IP TCP ssh > 56184 [SYN, ACK] Seq=0 Ack=1 Win=49680 Len=0 MSS=1380 WS=0

Frame 10504 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56184 (56184), Seq: 0, Ack: 1, Len: 0

No. Time Source Destination Protocol Info
10505 14:32:24.332442 Our_IP Their_IP TCP 56184 > ssh [ACK] Seq=1 Ack=1 Win=66048 Len=0

Frame 10505 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:01 (00:07:b4:00:78:01)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56184 (56184), Dst Port: ssh (22), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info
10506 14:32:24.373236 Our_IP Their_IP TCP 56184 > ssh [FIN, ACK] Seq=1 Ack=1 Win=66048 Len=0

Frame 10506 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:01 (00:07:b4:00:78:01)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56184 (56184), Dst Port: ssh (22), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info
10511 14:32:24.373562 Their_IP Our_IP SSH Server Protocol: SSH-2.0-OpenSSH_5.1\r

Frame 10511 (75 bytes on wire, 75 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56184 (56184), Seq: 1, Ack: 1, Len: 21
SSH Protocol

No. Time Source Destination Protocol Info
10512 14:32:24.373573 Our_IP Their_IP TCP 56184 > ssh [RST, ACK] Seq=2 Ack=22 Win=0 Len=0

Frame 10512 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:01 (00:07:b4:00:78:01)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56184 (56184), Dst Port: ssh (22), Seq: 2, Ack: 22, Len: 0