SFTP failing - TCP Reset occuring

Advertisement

Gman
Joined:
Posts:
2
Location:
California

SFTP failing - TCP Reset occuring

I am using winscript interface and get random SFTP failures. Sometimes this works for 2 weeks, then fails. Other times it fails every couple of days. The vendor and I have done some troubleshooting on this. We setup traces on our routers and found we were doing a TCP RST on our end during negotiation. So, I setup a WireShark trace on our host, and had my programmer drop files into the host, which automatically start winscp scripts.

Below shows: 1) WinSCP script log showing OPEN failure, 2) snippet of the WireShark trace when SFTP successful, and, 3) snippet of the WireShark trace when SFTP unsuccessful.

I am NOT a network engineer, but what I see is the sequence of: SYN>SYN,ACK>ACK>OpenSSH occuring when SFTP's are successful. But on the last trace entry #10512 at 14:32:24.373573, this is where the conversation fails when WinSCP sends an "RST,ACK" where I would have expected WinSCP to respond with a "SSH-2.0-WinSCP...".

I apologize that the WinSCP script log timestamps do not correspond to the trace. I wasn't able to capture the log that went with the trace, but I can assure ALL the failure logs are exactly the same; 21 or 22 seconds after the OPEN and then POOF!

Also, since gathering the info below, I upgraded WinSCP client to 4.3.2 on 2/4/2011 but failures still occur.

Thanks Martin for analyzing this. I've taken this as far as I can and am hoping you can provide a solution...



------------------------------------------------------------------------
WinSCP script log:
. 2011-02-03 21:28:08.951 --------------------------------------------------------------------------
. 2011-02-03 21:28:08.951 WinSCP Version 4.2.1 (Build 428) (OS 6.0.6002 Service Pack 2)
. 2011-02-03 21:28:08.951 Login time: Thursday, February 03, 2011 9:28:08 PM
. 2011-02-03 21:28:08.951 --------------------------------------------------------------------------
. 2011-02-03 21:28:08.951 Session name: Username@vendor_site.com
. 2011-02-03 21:28:08.951 Host name: vendor_site.com (Port: 22)
. 2011-02-03 21:28:08.951 User name: Username (Password: Yes, Key file: No)
. 2011-02-03 21:28:08.951 Tunnel: No
. 2011-02-03 21:28:08.951 Transfer Protocol: SFTP (SCP)
. 2011-02-03 21:28:08.951 Ping type: -, Ping interval: 30 sec; Timeout: 120 sec
. 2011-02-03 21:28:08.951 Proxy: none
. 2011-02-03 21:28:08.951 SSH protocol version: 2; Compression: No
. 2011-02-03 21:28:08.951 Bypass authentication: No
. 2011-02-03 21:28:08.951 Try agent: Yes; Agent forwarding: No; TIS/CryptoCard: No; KI: Yes; GSSAPI: No
. 2011-02-03 21:28:08.951 Ciphers: aes,blowfish,3des,WARN,arcfour,des; Ssh2DES: No
. 2011-02-03 21:28:08.951 SSH Bugs: -,-,-,-,-,-,-,-,-
. 2011-02-03 21:28:08.951 SFTP Bugs: -,-
. 2011-02-03 21:28:08.951 Return code variable: Autodetect; Lookup user groups: Yes
. 2011-02-03 21:28:08.951 Shell: default, EOL: 0
. 2011-02-03 21:28:08.951 Clear aliases: Yes, Unset nat.vars: Yes, Resolve symlinks: Yes
. 2011-02-03 21:28:08.951 LS: ls -la, Ign LS warn: Yes, Scp1 Comp: No
. 2011-02-03 21:28:08.951 Local directory: default, Remote directory: home, Update: No, Cache: Yes
. 2011-02-03 21:28:08.951 Cache directory changes: Yes, Permanent: Yes
. 2011-02-03 21:28:08.951 DST mode: 1
. 2011-02-03 21:28:08.951 --------------------------------------------------------------------------
. 2011-02-03 21:28:08.951 Looking up host "vendor_site.com"
. 2011-02-03 21:28:09.279 Connecting to XXX.XXX.XXX.XXX port 22
. 2011-02-03 21:28:30.277 Failed to connect to XXX.XXX.XXX.XXX: Network error: Connection timed out
. 2011-02-03 21:28:30.277 Connecting to XXX.XXX.XXX.XXX port 22
. 2011-02-03 21:28:30.292 Selecting events 63 for socket 1380
. 2011-02-03 21:28:30.292 Attempt to close connection due to fatal exception:
* 2011-02-03 21:28:30.292 Network error: Connection timed out.
. 2011-02-03 21:28:30.292 Closing connection.
. 2011-02-03 21:28:30.292 Sending special code: 12


------------------------------------------------------------------------
Trace of successful SFTP:

No. Time Source Destination Protocol Info
2921 14:12:17.681622 Our_IP Their_IP TCP 56111 > ssh [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=8

Frame 2921 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 0, Len: 0

No. Time Source Destination Protocol Info
2922 14:12:17.700290 Their_IP Our_IP TCP ssh > 56111 [SYN, ACK] Seq=0 Ack=1 Win=49680 Len=0 MSS=1380 WS=0

Frame 2922 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 0, Ack: 1, Len: 0

No. Time Source Destination Protocol Info
2923 14:12:17.700308 Our_IP Their_IP TCP 56111 > ssh [ACK] Seq=1 Ack=1 Win=66048 Len=0

Frame 2923 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info
2924 14:12:17.745412 Their_IP Our_IP SSHv2 Server Protocol: SSH-2.0-OpenSSH_5.1\r

Frame 2924 (75 bytes on wire, 75 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 1, Ack: 1, Len: 21
SSH Protocol

No. Time Source Destination Protocol Info
2925 14:12:17.745738 Our_IP Their_IP SSHv2 Client Protocol: SSH-2.0-WinSCP_release_4.2.1\r

Frame 2925 (84 bytes on wire, 84 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1, Ack: 22, Len: 30
SSH Protocol

No. Time Source Destination Protocol Info
2926 14:12:17.762769 Their_IP Our_IP TCP ssh > 56111 [ACK] Seq=22 Ack=31 Win=49680 Len=0

Frame 2926 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 22, Ack: 31, Len: 0

No. Time Source Destination Protocol Info
2927 14:12:17.762777 Our_IP Their_IP SSHv2 Client: Key Exchange Init

Frame 2927 (662 bytes on wire, 662 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 31, Ack: 22, Len: 608
SSH Protocol

No. Time Source Destination Protocol Info
2928 14:12:17.768164 Their_IP Our_IP SSHv2 Server: Key Exchange Init

Frame 2928 (838 bytes on wire, 838 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 22, Ack: 31, Len: 784
SSH Protocol

No. Time Source Destination Protocol Info
2929 14:12:17.780456 Their_IP Our_IP TCP ssh > 56111 [ACK] Seq=806 Ack=639 Win=49680 Len=0

Frame 2929 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 806, Ack: 639, Len: 0

No. Time Source Destination Protocol Info
2930 14:12:17.780464 Our_IP Their_IP SSHv2 Client: Diffie-Hellman Key Exchange Init

Frame 2930 (70 bytes on wire, 70 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 639, Ack: 806, Len: 16
SSH Protocol

No. Time Source Destination Protocol Info
2931 14:12:17.811980 Their_IP Our_IP SSHv2 Server: Diffie-Hellman Key Exchange Reply

Frame 2931 (334 bytes on wire, 334 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 806, Ack: 655, Len: 280
SSH Protocol

No. Time Source Destination Protocol Info
2933 14:12:17.880833 Our_IP Their_IP SSHv2 Client: Diffie-Hellman GEX Init

Frame 2933 (326 bytes on wire, 326 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 655, Ack: 1086, Len: 272
SSH Protocol

No. Time Source Destination Protocol Info
2934 14:12:17.960931 Their_IP Our_IP TCP ssh > 56111 [ACK] Seq=1086 Ack=927 Win=49680 Len=0

Frame 2934 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 1086, Ack: 927, Len: 0

No. Time Source Destination Protocol Info
2936 14:12:18.004061 Their_IP Our_IP SSHv2 Server: Diffie-Hellman GEX Reply

Frame 2936 (902 bytes on wire, 902 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 1086, Ack: 927, Len: 848
SSH Protocol

No. Time Source Destination Protocol Info
2937 14:12:18.078545 Our_IP Their_IP SSHv2 Client: New Keys

Frame 2937 (70 bytes on wire, 70 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 927, Ack: 1934, Len: 16
SSH Protocol

No. Time Source Destination Protocol Info
2938 14:12:18.160743 Their_IP Our_IP TCP ssh > 56111 [ACK] Seq=1934 Ack=943 Win=49680 Len=0

Frame 2938 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 1934, Ack: 943, Len: 0

No. Time Source Destination Protocol Info
2939 14:12:18.160752 Our_IP Their_IP SSHv2 Encrypted request packet len=52

Frame 2939 (106 bytes on wire, 106 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 943, Ack: 1934, Len: 52
SSH Protocol

No. Time Source Destination Protocol Info
2940 14:12:18.179123 Their_IP Our_IP SSHv2 Encrypted response packet len=52

Frame 2940 (106 bytes on wire, 106 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 1934, Ack: 995, Len: 52
SSH Protocol

No. Time Source Destination Protocol Info
2941 14:12:18.179358 Our_IP Their_IP SSHv2 Encrypted request packet len=68

Frame 2941 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 995, Ack: 1986, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2943 14:12:18.210002 Their_IP Our_IP SSHv2 Encrypted response packet len=84

Frame 2943 (138 bytes on wire, 138 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 1986, Ack: 1063, Len: 84
SSH Protocol

No. Time Source Destination Protocol Info
2944 14:12:18.210191 Our_IP Their_IP SSHv2 Encrypted request packet len=100

Frame 2944 (154 bytes on wire, 154 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1063, Ack: 2070, Len: 100
SSH Protocol

No. Time Source Destination Protocol Info
2946 14:12:18.227346 Their_IP Our_IP SSHv2 Encrypted response packet len=84

Frame 2946 (138 bytes on wire, 138 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 2070, Ack: 1163, Len: 84
SSH Protocol

No. Time Source Destination Protocol Info
2947 14:12:18.227811 Our_IP Their_IP SSHv2 Encrypted request packet len=296

Frame 2947 (350 bytes on wire, 350 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1163, Ack: 2154, Len: 296
SSH Protocol

No. Time Source Destination Protocol Info
2948 14:12:18.247942 Their_IP Our_IP SSHv2 Encrypted response packet len=36

Frame 2948 (90 bytes on wire, 90 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 2154, Ack: 1459, Len: 36
SSH Protocol

No. Time Source Destination Protocol Info
2949 14:12:18.248113 Our_IP Their_IP SSHv2 Encrypted request packet len=68

Frame 2949 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1459, Ack: 2190, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2950 14:12:18.265226 Their_IP Our_IP SSHv2 Encrypted response packet len=52

Frame 2950 (106 bytes on wire, 106 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 2190, Ack: 1527, Len: 52
SSH Protocol

No. Time Source Destination Protocol Info
2951 14:12:18.265411 Our_IP Their_IP SSHv2 Encrypted request packet len=84

Frame 2951 (138 bytes on wire, 138 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1527, Ack: 2242, Len: 84
SSH Protocol

No. Time Source Destination Protocol Info
2952 14:12:18.310543 Their_IP Our_IP TCP ssh > 56111 [ACK] Seq=2242 Ack=1611 Win=49680 Len=0

Frame 2952 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 2242, Ack: 1611, Len: 0

No. Time Source Destination Protocol Info
2953 14:12:18.310552 Our_IP Their_IP SSHv2 Encrypted request packet len=68

Frame 2953 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1611, Ack: 2242, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2954 14:12:18.329068 Their_IP Our_IP SSHv2 Encrypted response packet len=88

Frame 2954 (142 bytes on wire, 142 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 2242, Ack: 1679, Len: 88
SSH Protocol

No. Time Source Destination Protocol Info
2955 14:12:18.329566 Our_IP Their_IP SSHv2 Encrypted request packet len=52

Frame 2955 (106 bytes on wire, 106 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1679, Ack: 2330, Len: 52
SSH Protocol

No. Time Source Destination Protocol Info
2957 14:12:18.390798 Their_IP Our_IP TCP ssh > 56111 [ACK] Seq=2330 Ack=1731 Win=49680 Len=0

Frame 2957 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 2330, Ack: 1731, Len: 0

No. Time Source Destination Protocol Info
2958 14:12:18.443267 Their_IP Our_IP SSHv2 Encrypted response packet len=148

Frame 2958 (202 bytes on wire, 202 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 2330, Ack: 1731, Len: 148
SSH Protocol

No. Time Source Destination Protocol Info
2959 14:12:18.444251 Our_IP Their_IP SSHv2 Encrypted request packet len=52

Frame 2959 (106 bytes on wire, 106 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1731, Ack: 2478, Len: 52
SSH Protocol

No. Time Source Destination Protocol Info
2960 14:12:18.461693 Their_IP Our_IP SSHv2 Encrypted response packet len=100

Frame 2960 (154 bytes on wire, 154 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 2478, Ack: 1783, Len: 100
SSH Protocol

No. Time Source Destination Protocol Info
2961 14:12:18.462528 Our_IP Their_IP SSHv2 Encrypted request packet len=68

Frame 2961 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1783, Ack: 2578, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2962 14:12:18.481243 Their_IP Our_IP SSHv2 Encrypted response packet len=68

Frame 2962 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 2578, Ack: 1851, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2963 14:12:18.481599 Our_IP Their_IP SSHv2 Encrypted request packet len=68

Frame 2963 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1851, Ack: 2646, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2965 14:12:18.531154 Their_IP Our_IP TCP ssh > 56111 [ACK] Seq=2646 Ack=1919 Win=49680 Len=0

Frame 2965 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 2646, Ack: 1919, Len: 0

No. Time Source Destination Protocol Info
2967 14:12:18.564488 Their_IP Our_IP SSHv2 Encrypted response packet len=1380

Frame 2967 (1434 bytes on wire, 1434 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 2646, Ack: 1919, Len: 1380
SSH Protocol

No. Time Source Destination Protocol Info
2968 14:12:18.564676 Their_IP Our_IP SSHv2 Encrypted response packet len=1380

Frame 2968 (1434 bytes on wire, 1434 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 4026, Ack: 1919, Len: 1380
SSH Protocol

No. Time Source Destination Protocol Info
2969 14:12:18.564683 Our_IP Their_IP TCP 56111 > ssh [ACK] Seq=1919 Ack=5406 Win=66048 Len=0

Frame 2969 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1919, Ack: 5406, Len: 0

No. Time Source Destination Protocol Info
2970 14:12:18.564692 Their_IP Our_IP SSHv2 Encrypted response packet len=620

Frame 2970 (674 bytes on wire, 674 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 5406, Ack: 1919, Len: 620
SSH Protocol

No. Time Source Destination Protocol Info
2971 14:12:18.575437 Our_IP Their_IP SSHv2 Encrypted request packet len=68

Frame 2971 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1919, Ack: 6026, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2972 14:12:18.593114 Their_IP Our_IP SSHv2 Encrypted response packet len=84

Frame 2972 (138 bytes on wire, 138 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 6026, Ack: 1987, Len: 84
SSH Protocol

No. Time Source Destination Protocol Info
2973 14:12:18.593734 Our_IP Their_IP SSHv2 Encrypted request packet len=68

Frame 2973 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 1987, Ack: 6110, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2974 14:12:18.611234 Their_IP Our_IP SSHv2 Encrypted response packet len=68

Frame 2974 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 6110, Ack: 2055, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2975 14:12:18.611246 Our_IP Their_IP SSHv2 Encrypted request packet len=68

Frame 2975 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 2055, Ack: 6178, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2976 14:12:18.629442 Their_IP Our_IP SSHv2 Encrypted response packet len=68

Frame 2976 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 6178, Ack: 2123, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2977 14:12:18.629955 Our_IP Their_IP SSHv2 Encrypted request packet len=68

Frame 2977 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 2123, Ack: 6246, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2978 14:12:18.660714 Their_IP Our_IP TCP ssh > 56111 [ACK] Seq=6246 Ack=2191 Win=49680 Len=0

Frame 2978 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 6246, Ack: 2191, Len: 0

No. Time Source Destination Protocol Info
2979 14:12:18.708191 Their_IP Our_IP SSHv2 Encrypted response packet len=1380

Frame 2979 (1434 bytes on wire, 1434 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 6246, Ack: 2191, Len: 1380
SSH Protocol

No. Time Source Destination Protocol Info
2980 14:12:18.708442 Their_IP Our_IP SSHv2 Encrypted response packet len=1380

Frame 2980 (1434 bytes on wire, 1434 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 7626, Ack: 2191, Len: 1380
SSH Protocol

No. Time Source Destination Protocol Info
2981 14:12:18.708448 Our_IP Their_IP TCP 56111 > ssh [ACK] Seq=2191 Ack=9006 Win=66048 Len=0

Frame 2981 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 2191, Ack: 9006, Len: 0

No. Time Source Destination Protocol Info
2982 14:12:18.708453 Their_IP Our_IP SSHv2 Encrypted response packet len=620

Frame 2982 (674 bytes on wire, 674 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 9006, Ack: 2191, Len: 620
SSH Protocol

No. Time Source Destination Protocol Info
2983 14:12:18.719229 Our_IP Their_IP SSHv2 Encrypted request packet len=68

Frame 2983 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 2191, Ack: 9626, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2984 14:12:18.736219 Their_IP Our_IP SSHv2 Encrypted response packet len=84

Frame 2984 (138 bytes on wire, 138 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 9626, Ack: 2259, Len: 84
SSH Protocol

No. Time Source Destination Protocol Info
2985 14:12:18.736841 Our_IP Their_IP SSHv2 Encrypted request packet len=68

Frame 2985 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 2259, Ack: 9710, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2986 14:12:18.753583 Their_IP Our_IP SSHv2 Encrypted response packet len=68

Frame 2986 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 9710, Ack: 2327, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2987 14:12:18.753595 Our_IP Their_IP SSHv2 Encrypted request packet len=116

Frame 2987 (170 bytes on wire, 170 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 2327, Ack: 9778, Len: 116
SSH Protocol

No. Time Source Destination Protocol Info
2988 14:12:18.791283 Their_IP Our_IP TCP ssh > 56111 [ACK] Seq=9778 Ack=2443 Win=49680 Len=0

Frame 2988 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 9778, Ack: 2443, Len: 0

No. Time Source Destination Protocol Info
2989 14:12:18.791284 Their_IP Our_IP SSHv2 Encrypted response packet len=68

Frame 2989 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 9778, Ack: 2443, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2990 14:12:18.791956 Our_IP Their_IP SSHv2 Encrypted request packet len=100

Frame 2990 (154 bytes on wire, 154 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 2443, Ack: 9846, Len: 100
SSH Protocol

No. Time Source Destination Protocol Info
2991 14:12:18.809581 Their_IP Our_IP SSHv2 Encrypted response packet len=68

Frame 2991 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 9846, Ack: 2543, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2992 14:12:18.809593 Our_IP Their_IP SSHv2 Encrypted request packet len=168

Frame 2992 (222 bytes on wire, 222 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 2543, Ack: 9914, Len: 168
SSH Protocol

No. Time Source Destination Protocol Info
2993 14:12:18.834030 Their_IP Our_IP SSHv2 Encrypted response packet len=68

Frame 2993 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 9914, Ack: 2711, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2994 14:12:18.839043 Their_IP Our_IP SSHv2 Encrypted response packet len=68

Frame 2994 (122 bytes on wire, 122 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 9982, Ack: 2711, Len: 68
SSH Protocol

No. Time Source Destination Protocol Info
2995 14:12:18.839049 Our_IP Their_IP TCP 56111 > ssh [ACK] Seq=2711 Ack=10050 Win=65024 Len=0

Frame 2995 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 2711, Ack: 10050, Len: 0

No. Time Source Destination Protocol Info
2996 14:12:18.839869 Our_IP Their_IP SSHv2 Encrypted request packet len=36

Frame 2996 (90 bytes on wire, 90 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 2711, Ack: 10050, Len: 36
SSH Protocol

No. Time Source Destination Protocol Info
2997 14:12:18.839990 Our_IP Their_IP TCP 56111 > ssh [FIN, ACK] Seq=2747 Ack=10050 Win=65024 Len=0

Frame 2997 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 2747, Ack: 10050, Len: 0

No. Time Source Destination Protocol Info
3002 14:12:18.856555 Their_IP Our_IP TCP ssh > 56111 [ACK] Seq=10050 Ack=2748 Win=49680 Len=0

Frame 3002 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 10050, Ack: 2748, Len: 0

No. Time Source Destination Protocol Info
3003 14:12:18.856837 Their_IP Our_IP TCP ssh > 56111 [FIN, ACK] Seq=10050 Ack=2748 Win=49680 Len=0

Frame 3003 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56111 (56111), Seq: 10050, Ack: 2748, Len: 0

No. Time Source Destination Protocol Info
3004 14:12:18.856847 Our_IP Their_IP TCP 56111 > ssh [ACK] Seq=2748 Ack=10051 Win=65024 Len=0

Frame 3004 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:02 (00:07:b4:00:78:02)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56111 (56111), Dst Port: ssh (22), Seq: 2748, Ack: 10051, Len: 0



----------------------------------------------------------------------
Trace of UNsuccessful SFTP:



No. Time Source Destination Protocol Info
10503 14:32:24.315286 Our_IP Their_IP TCP 56184 > ssh [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=8

Frame 10503 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:01 (00:07:b4:00:78:01)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56184 (56184), Dst Port: ssh (22), Seq: 0, Len: 0

No. Time Source Destination Protocol Info
10504 14:32:24.332425 Their_IP Our_IP TCP ssh > 56184 [SYN, ACK] Seq=0 Ack=1 Win=49680 Len=0 MSS=1380 WS=0

Frame 10504 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56184 (56184), Seq: 0, Ack: 1, Len: 0

No. Time Source Destination Protocol Info
10505 14:32:24.332442 Our_IP Their_IP TCP 56184 > ssh [ACK] Seq=1 Ack=1 Win=66048 Len=0

Frame 10505 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:01 (00:07:b4:00:78:01)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56184 (56184), Dst Port: ssh (22), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info
10506 14:32:24.373236 Our_IP Their_IP TCP 56184 > ssh [FIN, ACK] Seq=1 Ack=1 Win=66048 Len=0

Frame 10506 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:01 (00:07:b4:00:78:01)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56184 (56184), Dst Port: ssh (22), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info
10511 14:32:24.373562 Their_IP Our_IP SSH Server Protocol: SSH-2.0-OpenSSH_5.1\r

Frame 10511 (75 bytes on wire, 75 bytes captured)
Ethernet II, Src: Cisco_3e:83:bf (00:1f:ca:3e:83:bf), Dst: Ibm_20:6c:54 (00:1a:64:20:6c:54)
Internet Protocol, Src: Their_IP (Their_IP), Dst: Our_IP (Our_IP)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 56184 (56184), Seq: 1, Ack: 1, Len: 21
SSH Protocol

No. Time Source Destination Protocol Info
10512 14:32:24.373573 Our_IP Their_IP TCP 56184 > ssh [RST, ACK] Seq=2 Ack=22 Win=0 Len=0

Frame 10512 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: Ibm_20:6c:54 (00:1a:64:20:6c:54), Dst: Cisco_00:78:01 (00:07:b4:00:78:01)
Internet Protocol, Src: Our_IP (Our_IP), Dst: Their_IP (Their_IP)
Transmission Control Protocol, Src Port: 56184 (56184), Dst Port: ssh (22), Seq: 2, Ack: 22, Len: 0

Reply with quote

Advertisement

Guest

Re: SFTP failing - TCP Reset occuring

Sorry. I have the WireShark traces, but not allowed to send them due to security concerns. Anything I can look for? Any ideas?

Reply with quote

Gman

Re: SFTP failing - TCP Reset occuring

I have created a work-around by adding a loop to my batch file to retry the SFTP transfer 10 times. So far, this is working. This could be a router config issue on one or more ends of the conversation, or some incompatibility between what WinSCP is doing and OpenSSH 5.1, which is what I see when it DOES connect. Not sure.

Reply with quote

Advertisement

You can post new topics in this forum