76 KiB
76 KiB
No. Time Source Destination Protocol Length Info
11507 106.218132 133.80.115.89 133.80.1.1 TCP 74 45505 → 22 [SYN] Seq=0 Win=64440 Len=0 MSS=1432 SACK_PERM TSval=3862862045 TSecr=0 WS=128
Frame 11507: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: Dell_25:c2:b4 (74:86:e2:25:c2:b4), Dst: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3)
Internet Protocol Version 4, Src: 133.80.115.89, Dst: 133.80.1.1
Transmission Control Protocol, Src Port: 45505, Dst Port: 22, Seq: 0, Len: 0
Source Port: 45505
Destination Port: 22
[Stream index: 110]
[Stream Packet Number: 1]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 0]
Sequence Number: 0 (relative sequence number)
Sequence Number (raw): 3459181221
[Next Sequence Number: 1 (relative sequence number)]
Acknowledgment Number: 0
Acknowledgment number (raw): 0
1010 .... = Header Length: 40 bytes (10)
Flags: 0x002 (SYN)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...0 .... = Acknowledgment: Not set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..1. = Syn: Set
.... .... ...0 = Fin: Not set
[TCP Flags: ··········S·]
Window: 64440
[Calculated window size: 64440]
Checksum: 0xe39f [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
Options: (20 bytes), Maximum segment size, SACK permitted, Timestamps, No-Operation (NOP), Window scale
[Timestamps]
No. Time Source Destination Protocol Length Info
11508 106.218711 133.80.1.1 133.80.115.89 TCP 60 22 → 45505 [SYN, ACK] Seq=0 Ack=1 Win=4096 Len=0 MSS=536
Frame 11508: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3), Dst: Dell_25:c2:b4 (74:86:e2:25:c2:b4)
Internet Protocol Version 4, Src: 133.80.1.1, Dst: 133.80.115.89
Transmission Control Protocol, Src Port: 22, Dst Port: 45505, Seq: 0, Ack: 1, Len: 0
Source Port: 22
Destination Port: 45505
[Stream index: 110]
[Stream Packet Number: 2]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 0]
Sequence Number: 0 (relative sequence number)
Sequence Number (raw): 220458938
[Next Sequence Number: 1 (relative sequence number)]
Acknowledgment Number: 1 (relative ack number)
Acknowledgment number (raw): 3459181222
0110 .... = Header Length: 24 bytes (6)
Flags: 0x012 (SYN, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..1. = Syn: Set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A··S·]
Window: 4096
[Calculated window size: 4096]
Checksum: 0xa52c [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
Options: (4 bytes), Maximum segment size
[Timestamps]
[SEQ/ACK analysis]
No. Time Source Destination Protocol Length Info
11509 106.219066 133.80.115.89 133.80.1.1 TCP 54 45505 → 22 [ACK] Seq=1 Ack=1 Win=64440 Len=0
Frame 11509: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: Dell_25:c2:b4 (74:86:e2:25:c2:b4), Dst: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3)
Internet Protocol Version 4, Src: 133.80.115.89, Dst: 133.80.1.1
Transmission Control Protocol, Src Port: 45505, Dst Port: 22, Seq: 1, Ack: 1, Len: 0
Source Port: 45505
Destination Port: 22
[Stream index: 110]
[Stream Packet Number: 3]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 0]
Sequence Number: 1 (relative sequence number)
Sequence Number (raw): 3459181222
[Next Sequence Number: 1 (relative sequence number)]
Acknowledgment Number: 1 (relative ack number)
Acknowledgment number (raw): 220458939
0101 .... = Header Length: 20 bytes (5)
Flags: 0x010 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A····]
Window: 64440
[Calculated window size: 64440]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xcd94 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
No. Time Source Destination Protocol Length Info
11510 106.225741 133.80.1.1 133.80.115.89 SSHv2 75 Server: Protocol (SSH-2.0-RGOS_PK3223)
Frame 11510: 75 bytes on wire (600 bits), 75 bytes captured (600 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3), Dst: Dell_25:c2:b4 (74:86:e2:25:c2:b4)
Internet Protocol Version 4, Src: 133.80.1.1, Dst: 133.80.115.89
Transmission Control Protocol, Src Port: 22, Dst Port: 45505, Seq: 1, Ack: 1, Len: 21
Source Port: 22
Destination Port: 45505
[Stream index: 110]
[Stream Packet Number: 4]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 21]
Sequence Number: 1 (relative sequence number)
Sequence Number (raw): 220458939
[Next Sequence Number: 22 (relative sequence number)]
Acknowledgment Number: 1 (relative ack number)
Acknowledgment number (raw): 3459181222
0101 .... = Header Length: 20 bytes (5)
Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······AP···]
Window: 4096
[Calculated window size: 4096]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xfff6 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
TCP payload (21 bytes)
SSH Protocol
No. Time Source Destination Protocol Length Info
11511 106.226133 133.80.115.89 133.80.1.1 TCP 54 45505 → 22 [ACK] Seq=1 Ack=22 Win=64419 Len=0
Frame 11511: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: Dell_25:c2:b4 (74:86:e2:25:c2:b4), Dst: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3)
Internet Protocol Version 4, Src: 133.80.115.89, Dst: 133.80.1.1
Transmission Control Protocol, Src Port: 45505, Dst Port: 22, Seq: 1, Ack: 22, Len: 0
Source Port: 45505
Destination Port: 22
[Stream index: 110]
[Stream Packet Number: 5]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 0]
Sequence Number: 1 (relative sequence number)
Sequence Number (raw): 3459181222
[Next Sequence Number: 1 (relative sequence number)]
Acknowledgment Number: 22 (relative ack number)
Acknowledgment number (raw): 220458960
0101 .... = Header Length: 20 bytes (5)
Flags: 0x010 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A····]
Window: 64419
[Calculated window size: 64419]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xcd94 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
No. Time Source Destination Protocol Length Info
11513 106.246987 133.80.115.89 133.80.1.1 SSHv2 76 Client: Protocol (SSH-2.0-ssh2js1.16.0)
Frame 11513: 76 bytes on wire (608 bits), 76 bytes captured (608 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: Dell_25:c2:b4 (74:86:e2:25:c2:b4), Dst: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3)
Internet Protocol Version 4, Src: 133.80.115.89, Dst: 133.80.1.1
Transmission Control Protocol, Src Port: 45505, Dst Port: 22, Seq: 1, Ack: 22, Len: 22
Source Port: 45505
Destination Port: 22
[Stream index: 110]
[Stream Packet Number: 6]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 22]
Sequence Number: 1 (relative sequence number)
Sequence Number (raw): 3459181222
[Next Sequence Number: 23 (relative sequence number)]
Acknowledgment Number: 22 (relative ack number)
Acknowledgment number (raw): 220458960
0101 .... = Header Length: 20 bytes (5)
Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······AP···]
Window: 64419
[Calculated window size: 64419]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xebe2 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
TCP payload (22 bytes)
SSH Protocol
No. Time Source Destination Protocol Length Info
11514 106.247518 133.80.1.1 133.80.115.89 TCP 60 22 → 45505 [ACK] Seq=22 Ack=23 Win=4074 Len=0
Frame 11514: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3), Dst: Dell_25:c2:b4 (74:86:e2:25:c2:b4)
Internet Protocol Version 4, Src: 133.80.1.1, Dst: 133.80.115.89
Transmission Control Protocol, Src Port: 22, Dst Port: 45505, Seq: 22, Ack: 23, Len: 0
Source Port: 22
Destination Port: 45505
[Stream index: 110]
[Stream Packet Number: 7]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 0]
Sequence Number: 22 (relative sequence number)
Sequence Number (raw): 220458960
[Next Sequence Number: 22 (relative sequence number)]
Acknowledgment Number: 23 (relative ack number)
Acknowledgment number (raw): 3459181244
0101 .... = Header Length: 20 bytes (5)
Flags: 0x010 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A····]
Window: 4074
[Calculated window size: 4074]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xb938 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
No. Time Source Destination Protocol Length Info
11515 106.248211 133.80.115.89 133.80.1.1 SSHv2 518 Client: Key Exchange Init
Frame 11515: 518 bytes on wire (4144 bits), 518 bytes captured (4144 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: Dell_25:c2:b4 (74:86:e2:25:c2:b4), Dst: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3)
Internet Protocol Version 4, Src: 133.80.115.89, Dst: 133.80.1.1
Transmission Control Protocol, Src Port: 45505, Dst Port: 22, Seq: 23, Ack: 22, Len: 464
Source Port: 45505
Destination Port: 22
[Stream index: 110]
[Stream Packet Number: 8]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 464]
Sequence Number: 23 (relative sequence number)
Sequence Number (raw): 3459181244
[Next Sequence Number: 487 (relative sequence number)]
Acknowledgment Number: 22 (relative ack number)
Acknowledgment number (raw): 220458960
0101 .... = Header Length: 20 bytes (5)
Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······AP···]
Window: 64419
[Calculated window size: 64419]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0x6f54 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
TCP payload (464 bytes)
SSH Protocol
No. Time Source Destination Protocol Length Info
11516 106.248887 133.80.1.1 133.80.115.89 TCP 60 22 → 45505 [ACK] Seq=22 Ack=487 Win=3632 Len=0
Frame 11516: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3), Dst: Dell_25:c2:b4 (74:86:e2:25:c2:b4)
Internet Protocol Version 4, Src: 133.80.1.1, Dst: 133.80.115.89
Transmission Control Protocol, Src Port: 22, Dst Port: 45505, Seq: 22, Ack: 487, Len: 0
Source Port: 22
Destination Port: 45505
[Stream index: 110]
[Stream Packet Number: 9]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 0]
Sequence Number: 22 (relative sequence number)
Sequence Number (raw): 220458960
[Next Sequence Number: 22 (relative sequence number)]
Acknowledgment Number: 487 (relative ack number)
Acknowledgment number (raw): 3459181708
0101 .... = Header Length: 20 bytes (5)
Flags: 0x010 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A····]
Window: 3632
[Calculated window size: 3632]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xb922 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
No. Time Source Destination Protocol Length Info
11517 106.249771 133.80.1.1 133.80.115.89 SSHv2 470 Server: Key Exchange Init
Frame 11517: 470 bytes on wire (3760 bits), 470 bytes captured (3760 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3), Dst: Dell_25:c2:b4 (74:86:e2:25:c2:b4)
Internet Protocol Version 4, Src: 133.80.1.1, Dst: 133.80.115.89
Transmission Control Protocol, Src Port: 22, Dst Port: 45505, Seq: 22, Ack: 487, Len: 416
Source Port: 22
Destination Port: 45505
[Stream index: 110]
[Stream Packet Number: 10]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 416]
Sequence Number: 22 (relative sequence number)
Sequence Number (raw): 220458960
[Next Sequence Number: 438 (relative sequence number)]
Acknowledgment Number: 487 (relative ack number)
Acknowledgment number (raw): 3459181708
0101 .... = Header Length: 20 bytes (5)
Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······AP···]
Window: 3632
[Calculated window size: 3632]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xdbfc [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
TCP payload (416 bytes)
SSH Protocol
No. Time Source Destination Protocol Length Info
11519 106.293029 133.80.115.89 133.80.1.1 SSHv2 198 Client: Diffie-Hellman Key Exchange Init
Frame 11519: 198 bytes on wire (1584 bits), 198 bytes captured (1584 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: Dell_25:c2:b4 (74:86:e2:25:c2:b4), Dst: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3)
Internet Protocol Version 4, Src: 133.80.115.89, Dst: 133.80.1.1
Transmission Control Protocol, Src Port: 45505, Dst Port: 22, Seq: 487, Ack: 438, Len: 144
Source Port: 45505
Destination Port: 22
[Stream index: 110]
[Stream Packet Number: 11]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 144]
Sequence Number: 487 (relative sequence number)
Sequence Number (raw): 3459181708
[Next Sequence Number: 631 (relative sequence number)]
Acknowledgment Number: 438 (relative ack number)
Acknowledgment number (raw): 220459376
0101 .... = Header Length: 20 bytes (5)
Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······AP···]
Window: 64003
[Calculated window size: 64003]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xb3c2 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
TCP payload (144 bytes)
SSH Protocol
No. Time Source Destination Protocol Length Info
11520 106.293704 133.80.1.1 133.80.115.89 TCP 60 22 → 45505 [ACK] Seq=438 Ack=631 Win=3952 Len=0
Frame 11520: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3), Dst: Dell_25:c2:b4 (74:86:e2:25:c2:b4)
Internet Protocol Version 4, Src: 133.80.1.1, Dst: 133.80.115.89
Transmission Control Protocol, Src Port: 22, Dst Port: 45505, Seq: 438, Ack: 631, Len: 0
Source Port: 22
Destination Port: 45505
[Stream index: 110]
[Stream Packet Number: 12]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 0]
Sequence Number: 438 (relative sequence number)
Sequence Number (raw): 220459376
[Next Sequence Number: 438 (relative sequence number)]
Acknowledgment Number: 631 (relative ack number)
Acknowledgment number (raw): 3459181852
0101 .... = Header Length: 20 bytes (5)
Flags: 0x010 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A····]
Window: 3952
[Calculated window size: 3952]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xb5b2 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
No. Time Source Destination Protocol Length Info
11567 107.285497 133.80.1.1 133.80.115.89 SSHv2 518 Server: Diffie-Hellman Key Exchange Reply, New Keys
Frame 11567: 518 bytes on wire (4144 bits), 518 bytes captured (4144 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3), Dst: Dell_25:c2:b4 (74:86:e2:25:c2:b4)
Internet Protocol Version 4, Src: 133.80.1.1, Dst: 133.80.115.89
Transmission Control Protocol, Src Port: 22, Dst Port: 45505, Seq: 438, Ack: 631, Len: 464
Source Port: 22
Destination Port: 45505
[Stream index: 110]
[Stream Packet Number: 13]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 464]
Sequence Number: 438 (relative sequence number)
Sequence Number (raw): 220459376
[Next Sequence Number: 902 (relative sequence number)]
Acknowledgment Number: 631 (relative ack number)
Acknowledgment number (raw): 3459181852
0101 .... = Header Length: 20 bytes (5)
Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······AP···]
Window: 4096
[Calculated window size: 4096]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0x0c65 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
TCP payload (464 bytes)
SSH Protocol
No. Time Source Destination Protocol Length Info
11568 107.287987 133.80.115.89 133.80.1.1 SSHv2 70 Client: New Keys
Frame 11568: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: Dell_25:c2:b4 (74:86:e2:25:c2:b4), Dst: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3)
Internet Protocol Version 4, Src: 133.80.115.89, Dst: 133.80.1.1
Transmission Control Protocol, Src Port: 45505, Dst Port: 22, Seq: 631, Ack: 902, Len: 16
Source Port: 45505
Destination Port: 22
[Stream index: 110]
[Stream Packet Number: 14]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 16]
Sequence Number: 631 (relative sequence number)
Sequence Number (raw): 3459181852
[Next Sequence Number: 647 (relative sequence number)]
Acknowledgment Number: 902 (relative ack number)
Acknowledgment number (raw): 220459840
0101 .... = Header Length: 20 bytes (5)
Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······AP···]
Window: 64003
[Calculated window size: 64003]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xa35a [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
TCP payload (16 bytes)
SSH Protocol
No. Time Source Destination Protocol Length Info
11569 107.288646 133.80.1.1 133.80.115.89 TCP 60 22 → 45505 [ACK] Seq=902 Ack=647 Win=4080 Len=0
Frame 11569: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3), Dst: Dell_25:c2:b4 (74:86:e2:25:c2:b4)
Internet Protocol Version 4, Src: 133.80.1.1, Dst: 133.80.115.89
Transmission Control Protocol, Src Port: 22, Dst Port: 45505, Seq: 902, Ack: 647, Len: 0
Source Port: 22
Destination Port: 45505
[Stream index: 110]
[Stream Packet Number: 15]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 0]
Sequence Number: 902 (relative sequence number)
Sequence Number (raw): 220459840
[Next Sequence Number: 902 (relative sequence number)]
Acknowledgment Number: 647 (relative ack number)
Acknowledgment number (raw): 3459181868
0101 .... = Header Length: 20 bytes (5)
Flags: 0x010 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A····]
Window: 4080
[Calculated window size: 4080]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xb352 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
No. Time Source Destination Protocol Length Info
11572 107.313790 133.80.115.89 133.80.1.1 SSHv2 86 Client: Encrypted packet (len=32)
Frame 11572: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: Dell_25:c2:b4 (74:86:e2:25:c2:b4), Dst: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3)
Internet Protocol Version 4, Src: 133.80.115.89, Dst: 133.80.1.1
Transmission Control Protocol, Src Port: 45505, Dst Port: 22, Seq: 647, Ack: 902, Len: 32
Source Port: 45505
Destination Port: 22
[Stream index: 110]
[Stream Packet Number: 16]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 32]
Sequence Number: 647 (relative sequence number)
Sequence Number (raw): 3459181868
[Next Sequence Number: 679 (relative sequence number)]
Acknowledgment Number: 902 (relative ack number)
Acknowledgment number (raw): 220459840
0101 .... = Header Length: 20 bytes (5)
Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······AP···]
Window: 64003
[Calculated window size: 64003]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0x350a [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
TCP payload (32 bytes)
SSH Protocol
No. Time Source Destination Protocol Length Info
11573 107.314402 133.80.1.1 133.80.115.89 TCP 60 22 → 45505 [ACK] Seq=902 Ack=679 Win=4064 Len=0
Frame 11573: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3), Dst: Dell_25:c2:b4 (74:86:e2:25:c2:b4)
Internet Protocol Version 4, Src: 133.80.1.1, Dst: 133.80.115.89
Transmission Control Protocol, Src Port: 22, Dst Port: 45505, Seq: 902, Ack: 679, Len: 0
Source Port: 22
Destination Port: 45505
[Stream index: 110]
[Stream Packet Number: 17]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 0]
Sequence Number: 902 (relative sequence number)
Sequence Number (raw): 220459840
[Next Sequence Number: 902 (relative sequence number)]
Acknowledgment Number: 679 (relative ack number)
Acknowledgment number (raw): 3459181900
0101 .... = Header Length: 20 bytes (5)
Flags: 0x010 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A····]
Window: 4064
[Calculated window size: 4064]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xb342 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
No. Time Source Destination Protocol Length Info
11574 107.315100 133.80.115.89 133.80.1.1 SSHv2 74 Encrypted packet (len=20)[Malformed Packet]
Frame 11574: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: Dell_25:c2:b4 (74:86:e2:25:c2:b4), Dst: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3)
Internet Protocol Version 4, Src: 133.80.115.89, Dst: 133.80.1.1
Transmission Control Protocol, Src Port: 45505, Dst Port: 22, Seq: 679, Ack: 902, Len: 20
Source Port: 45505
Destination Port: 22
[Stream index: 110]
[Stream Packet Number: 18]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 20]
Sequence Number: 679 (relative sequence number)
Sequence Number (raw): 3459181900
[Next Sequence Number: 699 (relative sequence number)]
Acknowledgment Number: 902 (relative ack number)
Acknowledgment number (raw): 220459840
0101 .... = Header Length: 20 bytes (5)
Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······AP···]
Window: 64003
[Calculated window size: 64003]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0x843f [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
TCP payload (20 bytes)
SSH Protocol
[Malformed Packet: SSH]
No. Time Source Destination Protocol Length Info
11575 107.315686 133.80.1.1 133.80.115.89 TCP 60 22 → 45505 [ACK] Seq=902 Ack=699 Win=4076 Len=0
Frame 11575: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3), Dst: Dell_25:c2:b4 (74:86:e2:25:c2:b4)
Internet Protocol Version 4, Src: 133.80.1.1, Dst: 133.80.115.89
Transmission Control Protocol, Src Port: 22, Dst Port: 45505, Seq: 902, Ack: 699, Len: 0
Source Port: 22
Destination Port: 45505
[Stream index: 110]
[Stream Packet Number: 19]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 0]
Sequence Number: 902 (relative sequence number)
Sequence Number (raw): 220459840
[Next Sequence Number: 902 (relative sequence number)]
Acknowledgment Number: 699 (relative ack number)
Acknowledgment number (raw): 3459181920
0101 .... = Header Length: 20 bytes (5)
Flags: 0x010 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A····]
Window: 4076
[Calculated window size: 4076]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xb322 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
No. Time Source Destination Protocol Length Info
11576 107.316471 133.80.1.1 133.80.115.89 SSHv2 106 Server: Encrypted packet (len=52)
Frame 11576: 106 bytes on wire (848 bits), 106 bytes captured (848 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3), Dst: Dell_25:c2:b4 (74:86:e2:25:c2:b4)
Internet Protocol Version 4, Src: 133.80.1.1, Dst: 133.80.115.89
Transmission Control Protocol, Src Port: 22, Dst Port: 45505, Seq: 902, Ack: 699, Len: 52
Source Port: 22
Destination Port: 45505
[Stream index: 110]
[Stream Packet Number: 20]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 52]
Sequence Number: 902 (relative sequence number)
Sequence Number (raw): 220459840
[Next Sequence Number: 954 (relative sequence number)]
Acknowledgment Number: 699 (relative ack number)
Acknowledgment number (raw): 3459181920
0101 .... = Header Length: 20 bytes (5)
Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······AP···]
Window: 4096
[Calculated window size: 4096]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0x3083 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
TCP payload (52 bytes)
SSH Protocol
No. Time Source Destination Protocol Length Info
11577 107.319386 133.80.115.89 133.80.1.1 SSHv2 102 Client: Encrypted packet (len=48)
Frame 11577: 102 bytes on wire (816 bits), 102 bytes captured (816 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: Dell_25:c2:b4 (74:86:e2:25:c2:b4), Dst: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3)
Internet Protocol Version 4, Src: 133.80.115.89, Dst: 133.80.1.1
Transmission Control Protocol, Src Port: 45505, Dst Port: 22, Seq: 699, Ack: 954, Len: 48
Source Port: 45505
Destination Port: 22
[Stream index: 110]
[Stream Packet Number: 21]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 48]
Sequence Number: 699 (relative sequence number)
Sequence Number (raw): 3459181920
[Next Sequence Number: 747 (relative sequence number)]
Acknowledgment Number: 954 (relative ack number)
Acknowledgment number (raw): 220459892
0101 .... = Header Length: 20 bytes (5)
Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······AP···]
Window: 64003
[Calculated window size: 64003]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xf281 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
TCP payload (48 bytes)
SSH Protocol
No. Time Source Destination Protocol Length Info
11578 107.320012 133.80.1.1 133.80.115.89 TCP 60 22 → 45505 [ACK] Seq=954 Ack=747 Win=4048 Len=0
Frame 11578: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3), Dst: Dell_25:c2:b4 (74:86:e2:25:c2:b4)
Internet Protocol Version 4, Src: 133.80.1.1, Dst: 133.80.115.89
Transmission Control Protocol, Src Port: 22, Dst Port: 45505, Seq: 954, Ack: 747, Len: 0
Source Port: 22
Destination Port: 45505
[Stream index: 110]
[Stream Packet Number: 22]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 0]
Sequence Number: 954 (relative sequence number)
Sequence Number (raw): 220459892
[Next Sequence Number: 954 (relative sequence number)]
Acknowledgment Number: 747 (relative ack number)
Acknowledgment number (raw): 3459181968
0101 .... = Header Length: 20 bytes (5)
Flags: 0x010 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A····]
Window: 4048
[Calculated window size: 4048]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xb2da [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
No. Time Source Destination Protocol Length Info
11579 107.320626 133.80.115.89 133.80.1.1 SSHv2 74 Encrypted packet (len=20)[Malformed Packet]
Frame 11579: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: Dell_25:c2:b4 (74:86:e2:25:c2:b4), Dst: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3)
Internet Protocol Version 4, Src: 133.80.115.89, Dst: 133.80.1.1
Transmission Control Protocol, Src Port: 45505, Dst Port: 22, Seq: 747, Ack: 954, Len: 20
Source Port: 45505
Destination Port: 22
[Stream index: 110]
[Stream Packet Number: 23]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 20]
Sequence Number: 747 (relative sequence number)
Sequence Number (raw): 3459181968
[Next Sequence Number: 767 (relative sequence number)]
Acknowledgment Number: 954 (relative ack number)
Acknowledgment number (raw): 220459892
0101 .... = Header Length: 20 bytes (5)
Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······AP···]
Window: 64003
[Calculated window size: 64003]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0x3a11 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
TCP payload (20 bytes)
SSH Protocol
[Malformed Packet: SSH]
No. Time Source Destination Protocol Length Info
11580 107.321223 133.80.1.1 133.80.115.89 TCP 60 22 → 45505 [ACK] Seq=954 Ack=767 Win=4076 Len=0
Frame 11580: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3), Dst: Dell_25:c2:b4 (74:86:e2:25:c2:b4)
Internet Protocol Version 4, Src: 133.80.1.1, Dst: 133.80.115.89
Transmission Control Protocol, Src Port: 22, Dst Port: 45505, Seq: 954, Ack: 767, Len: 0
Source Port: 22
Destination Port: 45505
[Stream index: 110]
[Stream Packet Number: 24]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 0]
Sequence Number: 954 (relative sequence number)
Sequence Number (raw): 220459892
[Next Sequence Number: 954 (relative sequence number)]
Acknowledgment Number: 767 (relative ack number)
Acknowledgment number (raw): 3459181988
0101 .... = Header Length: 20 bytes (5)
Flags: 0x010 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A····]
Window: 4076
[Calculated window size: 4076]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xb2aa [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
No. Time Source Destination Protocol Length Info
11581 107.322530 133.80.1.1 133.80.115.89 SSHv2 114 Server: Encrypted packet (len=60)
Frame 11581: 114 bytes on wire (912 bits), 114 bytes captured (912 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3), Dst: Dell_25:c2:b4 (74:86:e2:25:c2:b4)
Internet Protocol Version 4, Src: 133.80.1.1, Dst: 133.80.115.89
Transmission Control Protocol, Src Port: 22, Dst Port: 45505, Seq: 954, Ack: 767, Len: 60
Source Port: 22
Destination Port: 45505
[Stream index: 110]
[Stream Packet Number: 25]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 60]
Sequence Number: 954 (relative sequence number)
Sequence Number (raw): 220459892
[Next Sequence Number: 1014 (relative sequence number)]
Acknowledgment Number: 767 (relative ack number)
Acknowledgment number (raw): 3459181988
0101 .... = Header Length: 20 bytes (5)
Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······AP···]
Window: 4096
[Calculated window size: 4096]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0x2e65 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
TCP payload (60 bytes)
SSH Protocol
No. Time Source Destination Protocol Length Info
11582 107.324670 133.80.115.89 133.80.1.1 SSHv2 118 Client: Encrypted packet (len=64)
Frame 11582: 118 bytes on wire (944 bits), 118 bytes captured (944 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: Dell_25:c2:b4 (74:86:e2:25:c2:b4), Dst: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3)
Internet Protocol Version 4, Src: 133.80.115.89, Dst: 133.80.1.1
Transmission Control Protocol, Src Port: 45505, Dst Port: 22, Seq: 767, Ack: 1014, Len: 64
Source Port: 45505
Destination Port: 22
[Stream index: 110]
[Stream Packet Number: 26]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 64]
Sequence Number: 767 (relative sequence number)
Sequence Number (raw): 3459181988
[Next Sequence Number: 831 (relative sequence number)]
Acknowledgment Number: 1014 (relative ack number)
Acknowledgment number (raw): 220459952
0101 .... = Header Length: 20 bytes (5)
Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······AP···]
Window: 64003
[Calculated window size: 64003]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0x825a [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
TCP payload (64 bytes)
SSH Protocol
No. Time Source Destination Protocol Length Info
11583 107.325361 133.80.1.1 133.80.115.89 TCP 60 22 → 45505 [ACK] Seq=1014 Ack=831 Win=4032 Len=0
Frame 11583: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3), Dst: Dell_25:c2:b4 (74:86:e2:25:c2:b4)
Internet Protocol Version 4, Src: 133.80.1.1, Dst: 133.80.115.89
Transmission Control Protocol, Src Port: 22, Dst Port: 45505, Seq: 1014, Ack: 831, Len: 0
Source Port: 22
Destination Port: 45505
[Stream index: 110]
[Stream Packet Number: 27]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 0]
Sequence Number: 1014 (relative sequence number)
Sequence Number (raw): 220459952
[Next Sequence Number: 1014 (relative sequence number)]
Acknowledgment Number: 831 (relative ack number)
Acknowledgment number (raw): 3459182052
0101 .... = Header Length: 20 bytes (5)
Flags: 0x010 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A····]
Window: 4032
[Calculated window size: 4032]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xb25a [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
No. Time Source Destination Protocol Length Info
11584 107.325804 133.80.115.89 133.80.1.1 SSHv2 74 Encrypted packet (len=20)[Malformed Packet]
Frame 11584: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: Dell_25:c2:b4 (74:86:e2:25:c2:b4), Dst: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3)
Internet Protocol Version 4, Src: 133.80.115.89, Dst: 133.80.1.1
Transmission Control Protocol, Src Port: 45505, Dst Port: 22, Seq: 831, Ack: 1014, Len: 20
Source Port: 45505
Destination Port: 22
[Stream index: 110]
[Stream Packet Number: 28]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 20]
Sequence Number: 831 (relative sequence number)
Sequence Number (raw): 3459182052
[Next Sequence Number: 851 (relative sequence number)]
Acknowledgment Number: 1014 (relative ack number)
Acknowledgment number (raw): 220459952
0101 .... = Header Length: 20 bytes (5)
Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······AP···]
Window: 64003
[Calculated window size: 64003]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0x9e64 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
TCP payload (20 bytes)
SSH Protocol
[Malformed Packet: SSH]
No. Time Source Destination Protocol Length Info
11585 107.326387 133.80.1.1 133.80.115.89 TCP 60 22 → 45505 [ACK] Seq=1014 Ack=851 Win=4076 Len=0
Frame 11585: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3), Dst: Dell_25:c2:b4 (74:86:e2:25:c2:b4)
Internet Protocol Version 4, Src: 133.80.1.1, Dst: 133.80.115.89
Transmission Control Protocol, Src Port: 22, Dst Port: 45505, Seq: 1014, Ack: 851, Len: 0
Source Port: 22
Destination Port: 45505
[Stream index: 110]
[Stream Packet Number: 29]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 0]
Sequence Number: 1014 (relative sequence number)
Sequence Number (raw): 220459952
[Next Sequence Number: 1014 (relative sequence number)]
Acknowledgment Number: 851 (relative ack number)
Acknowledgment number (raw): 3459182072
0101 .... = Header Length: 20 bytes (5)
Flags: 0x010 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A····]
Window: 4076
[Calculated window size: 4076]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xb21a [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
No. Time Source Destination Protocol Length Info
11586 107.327224 133.80.1.1 133.80.115.89 SSHv2 90 Server: Encrypted packet (len=36)
Frame 11586: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3), Dst: Dell_25:c2:b4 (74:86:e2:25:c2:b4)
Internet Protocol Version 4, Src: 133.80.1.1, Dst: 133.80.115.89
Transmission Control Protocol, Src Port: 22, Dst Port: 45505, Seq: 1014, Ack: 851, Len: 36
Source Port: 22
Destination Port: 45505
[Stream index: 110]
[Stream Packet Number: 30]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 36]
Sequence Number: 1014 (relative sequence number)
Sequence Number (raw): 220459952
[Next Sequence Number: 1050 (relative sequence number)]
Acknowledgment Number: 851 (relative ack number)
Acknowledgment number (raw): 3459182072
0101 .... = Header Length: 20 bytes (5)
Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······AP···]
Window: 4096
[Calculated window size: 4096]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0x5762 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
TCP payload (36 bytes)
SSH Protocol
No. Time Source Destination Protocol Length Info
11587 107.370454 133.80.115.89 133.80.1.1 TCP 54 45505 → 22 [ACK] Seq=851 Ack=1050 Win=64003 Len=0
Frame 11587: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: Dell_25:c2:b4 (74:86:e2:25:c2:b4), Dst: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3)
Internet Protocol Version 4, Src: 133.80.115.89, Dst: 133.80.1.1
Transmission Control Protocol, Src Port: 45505, Dst Port: 22, Seq: 851, Ack: 1050, Len: 0
Source Port: 45505
Destination Port: 22
[Stream index: 110]
[Stream Packet Number: 31]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 0]
Sequence Number: 851 (relative sequence number)
Sequence Number (raw): 3459182072
[Next Sequence Number: 851 (relative sequence number)]
Acknowledgment Number: 1050 (relative ack number)
Acknowledgment number (raw): 220459988
0101 .... = Header Length: 20 bytes (5)
Flags: 0x010 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A····]
Window: 64003
[Calculated window size: 64003]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xc7de [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
No. Time Source Destination Protocol Length Info
11873 112.486510 133.80.115.89 133.80.1.1 SSHv2 94 Client: Encrypted packet (len=40)
Frame 11873: 94 bytes on wire (752 bits), 94 bytes captured (752 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: Dell_25:c2:b4 (74:86:e2:25:c2:b4), Dst: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3)
Internet Protocol Version 4, Src: 133.80.115.89, Dst: 133.80.1.1
Transmission Control Protocol, Src Port: 45505, Dst Port: 22, Seq: 851, Ack: 1050, Len: 40
Source Port: 45505
Destination Port: 22
[Stream index: 110]
[Stream Packet Number: 32]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 40]
Sequence Number: 851 (relative sequence number)
Sequence Number (raw): 3459182072
[Next Sequence Number: 891 (relative sequence number)]
Acknowledgment Number: 1050 (relative ack number)
Acknowledgment number (raw): 220459988
0101 .... = Header Length: 20 bytes (5)
Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······AP···]
Window: 64003
[Calculated window size: 64003]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xd7bf [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
TCP payload (40 bytes)
SSH Protocol
No. Time Source Destination Protocol Length Info
11874 112.487099 133.80.1.1 133.80.115.89 TCP 60 22 → 45505 [ACK] Seq=1050 Ack=891 Win=4056 Len=0
Frame 11874: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3), Dst: Dell_25:c2:b4 (74:86:e2:25:c2:b4)
Internet Protocol Version 4, Src: 133.80.1.1, Dst: 133.80.115.89
Transmission Control Protocol, Src Port: 22, Dst Port: 45505, Seq: 1050, Ack: 891, Len: 0
Source Port: 22
Destination Port: 45505
[Stream index: 110]
[Stream Packet Number: 33]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 0]
Sequence Number: 1050 (relative sequence number)
Sequence Number (raw): 220459988
[Next Sequence Number: 1050 (relative sequence number)]
Acknowledgment Number: 891 (relative ack number)
Acknowledgment number (raw): 3459182112
0101 .... = Header Length: 20 bytes (5)
Flags: 0x010 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A····]
Window: 4056
[Calculated window size: 4056]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xb1e2 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
No. Time Source Destination Protocol Length Info
11875 112.487425 133.80.115.89 133.80.1.1 SSHv2 74 Encrypted packet (len=20)[Malformed Packet]
Frame 11875: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: Dell_25:c2:b4 (74:86:e2:25:c2:b4), Dst: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3)
Internet Protocol Version 4, Src: 133.80.115.89, Dst: 133.80.1.1
Transmission Control Protocol, Src Port: 45505, Dst Port: 22, Seq: 891, Ack: 1050, Len: 20
Source Port: 45505
Destination Port: 22
[Stream index: 110]
[Stream Packet Number: 34]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 20]
Sequence Number: 891 (relative sequence number)
Sequence Number (raw): 3459182112
[Next Sequence Number: 911 (relative sequence number)]
Acknowledgment Number: 1050 (relative ack number)
Acknowledgment number (raw): 220459988
0101 .... = Header Length: 20 bytes (5)
Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······AP···]
Window: 64003
[Calculated window size: 64003]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0x88c9 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
TCP payload (20 bytes)
SSH Protocol
[Malformed Packet: SSH]
No. Time Source Destination Protocol Length Info
11876 112.487978 133.80.1.1 133.80.115.89 TCP 60 22 → 45505 [ACK] Seq=1050 Ack=911 Win=4076 Len=0
Frame 11876: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3), Dst: Dell_25:c2:b4 (74:86:e2:25:c2:b4)
Internet Protocol Version 4, Src: 133.80.1.1, Dst: 133.80.115.89
Transmission Control Protocol, Src Port: 22, Dst Port: 45505, Seq: 1050, Ack: 911, Len: 0
Source Port: 22
Destination Port: 45505
[Stream index: 110]
[Stream Packet Number: 35]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 0]
Sequence Number: 1050 (relative sequence number)
Sequence Number (raw): 220459988
[Next Sequence Number: 1050 (relative sequence number)]
Acknowledgment Number: 911 (relative ack number)
Acknowledgment number (raw): 3459182132
0101 .... = Header Length: 20 bytes (5)
Flags: 0x010 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A····]
Window: 4076
[Calculated window size: 4076]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xb1ba [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
No. Time Source Destination Protocol Length Info
11877 112.488769 133.80.1.1 133.80.115.89 SSHv2 122 Server: Encrypted packet (len=68)
Frame 11877: 122 bytes on wire (976 bits), 122 bytes captured (976 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3), Dst: Dell_25:c2:b4 (74:86:e2:25:c2:b4)
Internet Protocol Version 4, Src: 133.80.1.1, Dst: 133.80.115.89
Transmission Control Protocol, Src Port: 22, Dst Port: 45505, Seq: 1050, Ack: 911, Len: 68
Source Port: 22
Destination Port: 45505
[Stream index: 110]
[Stream Packet Number: 36]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 68]
Sequence Number: 1050 (relative sequence number)
Sequence Number (raw): 220459988
[Next Sequence Number: 1118 (relative sequence number)]
Acknowledgment Number: 911 (relative ack number)
Acknowledgment number (raw): 3459182132
0101 .... = Header Length: 20 bytes (5)
Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······AP···]
Window: 4096
[Calculated window size: 4096]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0x0bd2 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
TCP payload (68 bytes)
SSH Protocol
No. Time Source Destination Protocol Length Info
11878 112.489045 133.80.115.89 133.80.1.1 TCP 54 45505 → 22 [ACK] Seq=911 Ack=1118 Win=64003 Len=0
Frame 11878: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: Dell_25:c2:b4 (74:86:e2:25:c2:b4), Dst: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3)
Internet Protocol Version 4, Src: 133.80.115.89, Dst: 133.80.1.1
Transmission Control Protocol, Src Port: 45505, Dst Port: 22, Seq: 911, Ack: 1118, Len: 0
Source Port: 45505
Destination Port: 22
[Stream index: 110]
[Stream Packet Number: 37]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 0]
Sequence Number: 911 (relative sequence number)
Sequence Number (raw): 3459182132
[Next Sequence Number: 911 (relative sequence number)]
Acknowledgment Number: 1118 (relative ack number)
Acknowledgment number (raw): 220460056
0101 .... = Header Length: 20 bytes (5)
Flags: 0x010 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A····]
Window: 64003
[Calculated window size: 64003]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xc75e [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
No. Time Source Destination Protocol Length Info
11879 112.489217 133.80.1.1 133.80.115.89 SSHv2 130 Server: Encrypted packet (len=76)
Frame 11879: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3), Dst: Dell_25:c2:b4 (74:86:e2:25:c2:b4)
Internet Protocol Version 4, Src: 133.80.1.1, Dst: 133.80.115.89
Transmission Control Protocol, Src Port: 22, Dst Port: 45505, Seq: 1118, Ack: 911, Len: 76
Source Port: 22
Destination Port: 45505
[Stream index: 110]
[Stream Packet Number: 38]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 76]
Sequence Number: 1118 (relative sequence number)
Sequence Number (raw): 220460056
[Next Sequence Number: 1194 (relative sequence number)]
Acknowledgment Number: 911 (relative ack number)
Acknowledgment number (raw): 3459182132
0101 .... = Header Length: 20 bytes (5)
Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······AP···]
Window: 4096
[Calculated window size: 4096]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xa58e [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
TCP payload (76 bytes)
SSH Protocol
No. Time Source Destination Protocol Length Info
11880 112.489410 133.80.115.89 133.80.1.1 TCP 54 45505 → 22 [ACK] Seq=911 Ack=1194 Win=64003 Len=0
Frame 11880: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: Dell_25:c2:b4 (74:86:e2:25:c2:b4), Dst: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3)
Internet Protocol Version 4, Src: 133.80.115.89, Dst: 133.80.1.1
Transmission Control Protocol, Src Port: 45505, Dst Port: 22, Seq: 911, Ack: 1194, Len: 0
Source Port: 45505
Destination Port: 22
[Stream index: 110]
[Stream Packet Number: 39]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 0]
Sequence Number: 911 (relative sequence number)
Sequence Number (raw): 3459182132
[Next Sequence Number: 911 (relative sequence number)]
Acknowledgment Number: 1194 (relative ack number)
Acknowledgment number (raw): 220460132
0101 .... = Header Length: 20 bytes (5)
Flags: 0x010 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A····]
Window: 64003
[Calculated window size: 64003]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xc712 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
No. Time Source Destination Protocol Length Info
11881 112.489578 133.80.115.89 133.80.1.1 TCP 54 45505 → 22 [FIN, ACK] Seq=911 Ack=1194 Win=64003 Len=0
Frame 11881: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: Dell_25:c2:b4 (74:86:e2:25:c2:b4), Dst: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3)
Internet Protocol Version 4, Src: 133.80.115.89, Dst: 133.80.1.1
Transmission Control Protocol, Src Port: 45505, Dst Port: 22, Seq: 911, Ack: 1194, Len: 0
Source Port: 45505
Destination Port: 22
[Stream index: 110]
[Stream Packet Number: 40]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 0]
Sequence Number: 911 (relative sequence number)
Sequence Number (raw): 3459182132
[Next Sequence Number: 912 (relative sequence number)]
Acknowledgment Number: 1194 (relative ack number)
Acknowledgment number (raw): 220460132
0101 .... = Header Length: 20 bytes (5)
Flags: 0x011 (FIN, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...1 = Fin: Set
[TCP Flags: ·······A···F]
Window: 64003
[Calculated window size: 64003]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xc711 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
No. Time Source Destination Protocol Length Info
11882 112.490343 133.80.1.1 133.80.115.89 TCP 60 22 → 45505 [ACK] Seq=1194 Ack=912 Win=4096 Len=0
Frame 11882: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3), Dst: Dell_25:c2:b4 (74:86:e2:25:c2:b4)
Internet Protocol Version 4, Src: 133.80.1.1, Dst: 133.80.115.89
Transmission Control Protocol, Src Port: 22, Dst Port: 45505, Seq: 1194, Ack: 912, Len: 0
Source Port: 22
Destination Port: 45505
[Stream index: 110]
[Stream Packet Number: 41]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 0]
Sequence Number: 1194 (relative sequence number)
Sequence Number (raw): 220460132
[Next Sequence Number: 1194 (relative sequence number)]
Acknowledgment Number: 912 (relative ack number)
Acknowledgment number (raw): 3459182133
0101 .... = Header Length: 20 bytes (5)
Flags: 0x010 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A····]
Window: 4096
[Calculated window size: 4096]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xb115 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[SEQ/ACK analysis]
No. Time Source Destination Protocol Length Info
11900 112.683487 133.80.1.1 133.80.115.89 TCP 60 22 → 45505 [RST, ACK] Seq=1194 Ack=912 Win=4096 Len=0
Frame 11900: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface \Device\NPF_{487FF50B-D6AD-43B0-B1C0-3BB6E1B377F2}, id 0
Ethernet II, Src: RuijieNetwor_b3:66:a3 (58:69:6c:b3:66:a3), Dst: Dell_25:c2:b4 (74:86:e2:25:c2:b4)
Internet Protocol Version 4, Src: 133.80.1.1, Dst: 133.80.115.89
Transmission Control Protocol, Src Port: 22, Dst Port: 45505, Seq: 1194, Ack: 912, Len: 0
Source Port: 22
Destination Port: 45505
[Stream index: 110]
[Stream Packet Number: 42]
[Conversation completeness: Complete, WITH_DATA (63)]
[TCP Segment Len: 0]
Sequence Number: 1194 (relative sequence number)
Sequence Number (raw): 220460132
[Next Sequence Number: 1194 (relative sequence number)]
Acknowledgment Number: 912 (relative ack number)
Acknowledgment number (raw): 3459182133
0101 .... = Header Length: 20 bytes (5)
Flags: 0x014 (RST, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .1.. = Reset: Set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A·R··]
Window: 4096
[Calculated window size: 4096]
[Window size scaling factor: -2 (no window scaling used)]
Checksum: 0xb111 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]