|
#1
03-23-2018, 01:20 PM
|
|||
|
|||
|
SSH Connection issues
I can connect using Putty, MAC Terminal, Centos/Ubuntu terminal. The only application I can't connect to this server is SecureCRT.
I replaced the real IP address with 200.200.200.200. Please let me know what I need to do. [PRINTER] : Printer initialization succeeded [LOCAL] : SSH2Core version 8.3.0.1584 [LOCAL] : Connecting to 200.200.200.200:22 ... [LOCAL] : Changing state from STATE_NOT_CONNECTED to STATE_EXPECT_KEX_INIT SecureCRT - Version 8.3.2 (x64 build 1584) [LOCAL] : Using protocol SSH2 [LOCAL] : RECV : Remote Identifier = 'SSH-2.0-OpenSSH_7.4' [LOCAL] : CAP : Remote can re-key [LOCAL] : CAP : Remote sends language in password change requests [LOCAL] : CAP : Remote sends algorithm name in PK_OK packets [LOCAL] : CAP : Remote sends algorithm name in public key packets [LOCAL] : CAP : Remote sends algorithm name in signatures [LOCAL] : CAP : Remote sends error text in open failure packets [LOCAL] : CAP : Remote sends name in service accept packets [LOCAL] : CAP : Remote includes port number in x11 open packets [LOCAL] : CAP : Remote uses 160 bit keys for SHA1 MAC [LOCAL] : CAP : Remote supports new diffie-hellman group exchange messages [LOCAL] : CAP : Remote correctly handles unknown SFTP extensions [LOCAL] : CAP : Remote correctly encodes OID for gssapi [LOCAL] : CAP : Remote correctly uses connected addresses in forwarded-tcpip requests [LOCAL] : CAP : Remote can do SFTP version 4 [LOCAL] : CAP : Remote uses SHA1 hash in RSA signatures for x.509v3 [LOCAL] : CAP : Remote x.509v3 uses ASN.1 encoding for DSA signatures [LOCAL] : CAP : Remote correctly handles zlib@openssh.com [LOCAL] : SSPI : Requesting full delegation [LOCAL] : SSPI : [Kerberos] SPN : host@200.200.200.200 [LOCAL] : SSPI : [Kerberos] InitializeSecurityContext() failed. [LOCAL] : SSPI : [Kerberos] The specified target is unknown or unreachable [LOCAL] : SSPI : [Kerberos] Disabling gss mechanism [LOCAL] : GSS : Requesting full delegation [LOCAL] : GSS : [Kerberos] SPN : host@200.200.200.200 [LOCAL] : GSS : [Kerberos] InitializeSecurityContext() failed. [LOCAL] : GSS : [Kerberos] Could not load library 'gssapi64.dll': The specified module could not be found. [LOCAL] : GSS : [Kerberos] Disabling gss mechanism [LOCAL] : GSS : [Kerberos] Disabling gss mechanism [LOCAL] : The following key exchange method has been filtered from the key exchange method list because it is not supported: gss-group1-sha1-toWM5Slw5Ew8Mqkay+al2g== [LOCAL] : SSPI : Requesting full delegation [LOCAL] : SSPI : [Kerberos (Group Exchange)] SPN : host@200.200.200.200 [LOCAL] : SSPI : [Kerberos (Group Exchange)] InitializeSecurityContext() failed. [LOCAL] : SSPI : [Kerberos (Group Exchange)] The specified target is unknown or unreachable [LOCAL] : SSPI : [Kerberos (Group Exchange)] Disabling gss mechanism [LOCAL] : GSS : Requesting full delegation [LOCAL] : GSS : [Kerberos (Group Exchange)] SPN : host@200.200.200.200 [LOCAL] : GSS : [Kerberos (Group Exchange)] InitializeSecurityContext() failed. [LOCAL] : GSS : [Kerberos (Group Exchange)] Could not load library 'gssapi64.dll': The specified module could not be found. [LOCAL] : GSS : [Kerberos (Group Exchange)] Disabling gss mechanism [LOCAL] : GSS : [Kerberos (Group Exchange)] Disabling gss mechanism [LOCAL] : The following key exchange method has been filtered from the key exchange method list because it is not supported: gss-gex-sha1-toWM5Slw5Ew8Mqkay+al2g== [LOCAL] : SEND : KEXINIT [LOCAL] : RECV : Read kexinit [LOCAL] : Available Remote Kex Methods = curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [LOCAL] : Selected Kex Method = ecdh-sha2-nistp521 [LOCAL] : Available Remote Host Key Algos = ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519 [LOCAL] : Selected Host Key Algo = ssh-rsa [LOCAL] : Available Remote Send Ciphers = chacha20-poly1305@openssh.com,aes128...cm@openssh.com,aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,cast128-cbc,3des-cbc [LOCAL] : Selected Send Cipher = aes256-ctr [LOCAL] : Available Remote Recv Ciphers = chacha20-poly1305@openssh.com,aes128...cm@openssh.com,aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,cast128-cbc,3des-cbc [LOCAL] : Selected Recv Cipher = aes256-ctr [LOCAL] : Available Remote Send Macs = umac-64-etm@openssh.com,umac-128-etm...28@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [LOCAL] : Selected Send Mac = hmac-sha2-256 [LOCAL] : Available Remote Recv Macs = umac-64-etm@openssh.com,umac-128-etm...28@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [LOCAL] : Selected Recv Mac = hmac-sha2-256 [LOCAL] : Available Remote Compressors = none,zlib@openssh.com [LOCAL] : Selected Compressor = none [LOCAL] : Available Remote Decompressors = none,zlib@openssh.com [LOCAL] : Selected Decompressor = none [LOCAL] : Changing state from STATE_EXPECT_KEX_INIT to STATE_KEY_EXCHANGE [LOCAL] : SEND : SSH_MSG_KEX_ECDH_INIT [LOCAL] : RECV : SSH_MSG_KEX_ECDH_REPLY [LOCAL] : SEND: Disconnect packet: The server's host key failed to verify. This could mean that the server you are connected to is impersonating the server it claims to be. A connection could not be established. [LOCAL] : Changing state from STATE_KEY_EXCHANGE to STATE_SEND_DISCONNECT [LOCAL] : RECV : NEWKEYS [LOCAL] : Changing state from STATE_SEND_DISCONNECT to STATE_CLOSED [LOCAL] : Connected for 1 seconds, 1218 bytes sent, 2029 bytes received [LOCAL] : Stream has closed [CLOSE_TYPE_NONSPECIFIC] : The client has disconnected from the server. Reason: The server's host key failed to verify. This could mean that the server you are connected to is impersonating the server it claims to be. A connection could not be established. The client has disconnected from the server. Reason: The server's host key failed to verify. This could mean that the server you are connected to is impersonating the server it claims to be. A connection could not be established. 
|
|
#2
03-23-2018, 01:31 PM
|
|||
|
|||
|
Hi taksoy007,
I'm sorry you're having trouble. What Operating System are you running SecureCRT on? What type of device are you connecting to? Would you be able to provide a log from a successful connection? *Edited to remove version question, I missed it in the log sorry.
__________________
Thanks, --Eric VanDyke Software Technical Support support@vandyke.com (505) 332-5730 Last edited by ekoranyi; 03-23-2018 at 01:39 PM.
|
|
#4
03-23-2018, 02:00 PM
|
|||
|
|||
|
taksoy007,
Thanks for the additional information. Are you able to provide a log file from one of the clients that is successfully connecting? I'd like to see if that can help us determine what is happening differently between something like PuTTY and SecureCRT.
__________________
Thanks, --Eric VanDyke Software Technical Support support@vandyke.com (505) 332-5730
|
|
#5
03-23-2018, 02:13 PM
|
|||
|
|||
|
PuTTY output
PUTTY OUTPUT:
=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2018.03.23 13:10:38 =~=~=~=~=~=~=~=~=~=~=~= Event Log: Writing new session log (SSH raw data mode) to file: C:\Users\ata\Desktop\putty.log Event Log: Connecting to 200.200.200.200 port 22 Event Log: We claim version: SSH-2.0-PuTTY_Release_0.70 Incoming raw data at 2018-03-23 13:10:38 00000000 53 53 48 2d 32 2e 30 2d 4f 70 65 6e 53 53 48 5f SSH-2.0-OpenSSH_ 00000010 37 2e 34 0d 0a 7.4.. Event Log: Server version: SSH-2.0-OpenSSH_7.4 Event Log: Using SSH protocol version 2 Outgoing packet #0x0, type 20 / 0x14 (SSH2_MSG_KEXINIT) 00000000 24 35 df dd 6b 63 f1 38 8d be 62 fc 89 47 7d eb $5..kc.8..b..G}. 00000010 00 00 00 f0 63 75 72 76 65 32 35 35 31 39 2d 73 ....curve25519-s 00000020 68 61 32 35 36 40 6c 69 62 73 73 68 2e 6f 72 67 ha256@libssh.org 00000030 2c 65 63 64 68 2d 73 68 61 32 2d 6e 69 73 74 70 ,ecdh-sha2-nistp 00000040 32 35 36 2c 65 63 64 68 2d 73 68 61 32 2d 6e 69 256,ecdh-sha2-ni 00000050 73 74 70 33 38 34 2c 65 63 64 68 2d 73 68 61 32 stp384,ecdh-sha2 00000060 2d 6e 69 73 74 70 35 32 31 2c 64 69 66 66 69 65 -nistp521,diffie 00000070 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 2d 65 -hellman-group-e 00000080 78 63 68 61 6e 67 65 2d 73 68 61 32 35 36 2c 64 xchange-sha256,d 00000090 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 iffie-hellman-gr 000000a0 6f 75 70 2d 65 78 63 68 61 6e 67 65 2d 73 68 61 oup-exchange-sha 000000b0 31 2c 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 1,diffie-hellman 000000c0 2d 67 72 6f 75 70 31 34 2d 73 68 61 31 2c 72 73 -group14-sha1,rs 000000d0 61 32 30 34 38 2d 73 68 61 32 35 36 2c 72 73 61 a2048-sha256,rsa 000000e0 31 30 32 34 2d 73 68 61 31 2c 64 69 66 66 69 65 1024-sha1,diffie 000000f0 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 31 2d -hellman-group1- 00000100 73 68 61 31 00 00 00 57 73 73 68 2d 65 64 32 35 sha1...Wssh-ed25 00000110 35 31 39 2c 65 63 64 73 61 2d 73 68 61 32 2d 6e 519,ecdsa-sha2-n 00000120 69 73 74 70 32 35 36 2c 65 63 64 73 61 2d 73 68 istp256,ecdsa-sh 00000130 61 32 2d 6e 69 73 74 70 33 38 34 2c 65 63 64 73 a2-nistp384,ecds 00000140 61 2d 73 68 61 32 2d 6e 69 73 74 70 35 32 31 2c a-sha2-nistp521, 00000150 73 73 68 2d 72 73 61 2c 73 73 68 2d 64 73 73 00 ssh-rsa,ssh-dss. 00000160 00 00 bd 61 65 73 32 35 36 2d 63 74 72 2c 61 65 ...aes256-ctr,ae 00000170 73 32 35 36 2d 63 62 63 2c 72 69 6a 6e 64 61 65 s256-cbc,rijndae 00000180 6c 2d 63 62 63 40 6c 79 73 61 74 6f 72 2e 6c 69 l-cbc@lysator.li 00000190 75 2e 73 65 2c 61 65 73 31 39 32 2d 63 74 72 2c u.se,aes192-ctr, 000001a0 61 65 73 31 39 32 2d 63 62 63 2c 61 65 73 31 32 aes192-cbc,aes12 000001b0 38 2d 63 74 72 2c 61 65 73 31 32 38 2d 63 62 63 8-ctr,aes128-cbc 000001c0 2c 63 68 61 63 68 61 32 30 2d 70 6f 6c 79 31 33 ,chacha20-poly13 000001d0 30 35 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 2c 62 05@openssh.com,b 000001e0 6c 6f 77 66 69 73 68 2d 63 74 72 2c 62 6c 6f 77 lowfish-ctr,blow 000001f0 66 69 73 68 2d 63 62 63 2c 33 64 65 73 2d 63 74 fish-cbc,3des-ct 00000200 72 2c 33 64 65 73 2d 63 62 63 2c 61 72 63 66 6f r,3des-cbc,arcfo 00000210 75 72 32 35 36 2c 61 72 63 66 6f 75 72 31 32 38 ur256,arcfour128 00000220 00 00 00 bd 61 65 73 32 35 36 2d 63 74 72 2c 61 ....aes256-ctr,a 00000230 65 73 32 35 36 2d 63 62 63 2c 72 69 6a 6e 64 61 es256-cbc,rijnda 00000240 65 6c 2d 63 62 63 40 6c 79 73 61 74 6f 72 2e 6c el-cbc@lysator.l 00000250 69 75 2e 73 65 2c 61 65 73 31 39 32 2d 63 74 72 iu.se,aes192-ctr 00000260 2c 61 65 73 31 39 32 2d 63 62 63 2c 61 65 73 31 ,aes192-cbc,aes1 00000270 32 38 2d 63 74 72 2c 61 65 73 31 32 38 2d 63 62 28-ctr,aes128-cb 00000280 63 2c 63 68 61 63 68 61 32 30 2d 70 6f 6c 79 31 c,chacha20-poly1 00000290 33 30 35 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 2c 305@openssh.com, 000002a0 62 6c 6f 77 66 69 73 68 2d 63 74 72 2c 62 6c 6f blowfish-ctr,blo 000002b0 77 66 69 73 68 2d 63 62 63 2c 33 64 65 73 2d 63 wfish-cbc,3des-c 000002c0 74 72 2c 33 64 65 73 2d 63 62 63 2c 61 72 63 66 tr,3des-cbc,arcf 000002d0 6f 75 72 32 35 36 2c 61 72 63 66 6f 75 72 31 32 our256,arcfour12 000002e0 38 00 00 00 9b 68 6d 61 63 2d 73 68 61 32 2d 32 8....hmac-sha2-2 000002f0 35 36 2c 68 6d 61 63 2d 73 68 61 31 2c 68 6d 61 56,hmac-sha1,hma 00000300 63 2d 73 68 61 31 2d 39 36 2c 68 6d 61 63 2d 6d c-sha1-96,hmac-m 00000310 64 35 2c 68 6d 61 63 2d 73 68 61 32 2d 32 35 36 d5,hmac-sha2-256 00000320 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d -etm@openssh.com 00000330 2c 68 6d 61 63 2d 73 68 61 31 2d 65 74 6d 40 6f ,hmac-sha1-etm@o 00000340 70 65 6e 73 73 68 2e 63 6f 6d 2c 68 6d 61 63 2d penssh.com,hmac- 00000350 73 68 61 31 2d 39 36 2d 65 74 6d 40 6f 70 65 6e sha1-96-etm@open 00000360 73 73 68 2e 63 6f 6d 2c 68 6d 61 63 2d 6d 64 35 ssh.com,hmac-md5 00000370 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d -etm@openssh.com 00000380 00 00 00 9b 68 6d 61 63 2d 73 68 61 32 2d 32 35 ....hmac-sha2-25 00000390 36 2c 68 6d 61 63 2d 73 68 61 31 2c 68 6d 61 63 6,hmac-sha1,hmac 000003a0 2d 73 68 61 31 2d 39 36 2c 68 6d 61 63 2d 6d 64 -sha1-96,hmac-md 000003b0 35 2c 68 6d 61 63 2d 73 68 61 32 2d 32 35 36 2d 5,hmac-sha2-256- 000003c0 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 2c etm@openssh.com, 000003d0 68 6d 61 63 2d 73 68 61 31 2d 65 74 6d 40 6f 70 hmac-sha1-etm@op 000003e0 65 6e 73 73 68 2e 63 6f 6d 2c 68 6d 61 63 2d 73 enssh.com,hmac-s 000003f0 68 61 31 2d 39 36 2d 65 74 6d 40 6f 70 65 6e 73 ha1-96-etm@opens 00000400 73 68 2e 63 6f 6d 2c 68 6d 61 63 2d 6d 64 35 2d sh.com,hmac-md5- 00000410 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 00 etm@openssh.com. 00000420 00 00 09 6e 6f 6e 65 2c 7a 6c 69 62 00 00 00 09 ...none,zlib.... 00000430 6e 6f 6e 65 2c 7a 6c 69 62 00 00 00 00 00 00 00 none,zlib....... 00000440 00 00 00 00 00 00 ...... Outgoing raw data at 2018-03-23 13:10:38 00000000 00 00 04 4c 04 14 24 35 df dd 6b 63 f1 38 8d be ...L..$5..kc.8.. 00000010 62 fc 89 47 7d eb 00 00 00 f0 63 75 72 76 65 32 b..G}.....curve2 00000020 35 35 31 39 2d 73 68 61 32 35 36 40 6c 69 62 73 5519-sha256@libs 00000030 73 68 2e 6f 72 67 2c 65 63 64 68 2d 73 68 61 32 sh.org,ecdh-sha2 00000040 2d 6e 69 73 74 70 32 35 36 2c 65 63 64 68 2d 73 -nistp256,ecdh-s 00000050 68 61 32 2d 6e 69 73 74 70 33 38 34 2c 65 63 64 ha2-nistp384,ecd 00000060 68 2d 73 68 61 32 2d 6e 69 73 74 70 35 32 31 2c h-sha2-nistp521, 00000070 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 diffie-hellman-g 00000080 72 6f 75 70 2d 65 78 63 68 61 6e 67 65 2d 73 68 roup-exchange-sh 00000090 61 32 35 36 2c 64 69 66 66 69 65 2d 68 65 6c 6c a256,diffie-hell 000000a0 6d 61 6e 2d 67 72 6f 75 70 2d 65 78 63 68 61 6e man-group-exchan 000000b0 67 65 2d 73 68 61 31 2c 64 69 66 66 69 65 2d 68 ge-sha1,diffie-h 000000c0 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 31 34 2d 73 ellman-group14-s 000000d0 68 61 31 2c 72 73 61 32 30 34 38 2d 73 68 61 32 ha1,rsa2048-sha2 000000e0 35 36 2c 72 73 61 31 30 32 34 2d 73 68 61 31 2c 56,rsa1024-sha1, 000000f0 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 diffie-hellman-g 00000100 72 6f 75 70 31 2d 73 68 61 31 00 00 00 57 73 73 roup1-sha1...Wss 00000110 68 2d 65 64 32 35 35 31 39 2c 65 63 64 73 61 2d h-ed25519,ecdsa- 00000120 73 68 61 32 2d 6e 69 73 74 70 32 35 36 2c 65 63 sha2-nistp256,ec 00000130 64 73 61 2d 73 68 61 32 2d 6e 69 73 74 70 33 38 dsa-sha2-nistp38 00000140 34 2c 65 63 64 73 61 2d 73 68 61 32 2d 6e 69 73 4,ecdsa-sha2-nis 00000150 74 70 35 32 31 2c 73 73 68 2d 72 73 61 2c 73 73 tp521,ssh-rsa,ss 00000160 68 2d 64 73 73 00 00 00 bd 61 65 73 32 35 36 2d h-dss....aes256- 00000170 63 74 72 2c 61 65 73 32 35 36 2d 63 62 63 2c 72 ctr,aes256-cbc,r 00000180 69 6a 6e 64 61 65 6c 2d 63 62 63 40 6c 79 73 61 ijndael-cbc@lysa 00000190 74 6f 72 2e 6c 69 75 2e 73 65 2c 61 65 73 31 39 tor.liu.se,aes19 000001a0 32 2d 63 74 72 2c 61 65 73 31 39 32 2d 63 62 63 2-ctr,aes192-cbc 000001b0 2c 61 65 73 31 32 38 2d 63 74 72 2c 61 65 73 31 ,aes128-ctr,aes1 000001c0 32 38 2d 63 62 63 2c 63 68 61 63 68 61 32 30 2d 28-cbc,chacha20- 000001d0 70 6f 6c 79 31 33 30 35 40 6f 70 65 6e 73 73 68 poly1305@openssh 000001e0 2e 63 6f 6d 2c 62 6c 6f 77 66 69 73 68 2d 63 74 .com,blowfish-ct 000001f0 72 2c 62 6c 6f 77 66 69 73 68 2d 63 62 63 2c 33 r,blowfish-cbc,3 00000200 64 65 73 2d 63 74 72 2c 33 64 65 73 2d 63 62 63 des-ctr,3des-cbc 00000210 2c 61 72 63 66 6f 75 72 32 35 36 2c 61 72 63 66 ,arcfour256,arcf 00000220 6f 75 72 31 32 38 00 00 00 bd 61 65 73 32 35 36 our128....aes256 00000230 2d 63 74 72 2c 61 65 73 32 35 36 2d 63 62 63 2c -ctr,aes256-cbc, 00000240 72 69 6a 6e 64 61 65 6c 2d 63 62 63 40 6c 79 73 rijndael-cbc@lys 00000250 61 74 6f 72 2e 6c 69 75 2e 73 65 2c 61 65 73 31 ator.liu.se,aes1 00000260 39 32 2d 63 74 72 2c 61 65 73 31 39 32 2d 63 62 92-ctr,aes192-cb 00000270 63 2c 61 65 73 31 32 38 2d 63 74 72 2c 61 65 73 c,aes128-ctr,aes 00000280 31 32 38 2d 63 62 63 2c 63 68 61 63 68 61 32 30 128-cbc,chacha20 00000290 2d 70 6f 6c 79 31 33 30 35 40 6f 70 65 6e 73 73 -poly1305@openss 000002a0 68 2e 63 6f 6d 2c 62 6c 6f 77 66 69 73 68 2d 63 h.com,blowfish-c 000002b0 74 72 2c 62 6c 6f 77 66 69 73 68 2d 63 62 63 2c tr,blowfish-cbc, 000002c0 33 64 65 73 2d 63 74 72 2c 33 64 65 73 2d 63 62 3des-ctr,3des-cb 000002d0 63 2c 61 72 63 66 6f 75 72 32 35 36 2c 61 72 63 c,arcfour256,arc 000002e0 66 6f 75 72 31 32 38 00 00 00 9b 68 6d 61 63 2d four128....hmac- 000002f0 73 68 61 32 2d 32 35 36 2c 68 6d 61 63 2d 73 68 sha2-256,hmac-sh 00000300 61 31 2c 68 6d 61 63 2d 73 68 61 31 2d 39 36 2c a1,hmac-sha1-96, 00000310 68 6d 61 63 2d 6d 64 35 2c 68 6d 61 63 2d 73 68 hmac-md5,hmac-sh 00000320 61 32 2d 32 35 36 2d 65 74 6d 40 6f 70 65 6e 73 a2-256-etm@opens 00000330 73 68 2e 63 6f 6d 2c 68 6d 61 63 2d 73 68 61 31 sh.com,hmac-sha1 00000340 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d -etm@openssh.com 00000350 2c 68 6d 61 63 2d 73 68 61 31 2d 39 36 2d 65 74 ,hmac-sha1-96-et 00000360 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 2c 68 6d m@openssh.com,hm 00000370 61 63 2d 6d 64 35 2d 65 74 6d 40 6f 70 65 6e 73 ac-md5-etm@opens 00000380 73 68 2e 63 6f 6d 00 00 00 9b 68 6d 61 63 2d 73 sh.com....hmac-s 00000390 68 61 32 2d 32 35 36 2c 68 6d 61 63 2d 73 68 61 ha2-256,hmac-sha 000003a0 31 2c 68 6d 61 63 2d 73 68 61 31 2d 39 36 2c 68 1,hmac-sha1-96,h 000003b0 6d 61 63 2d 6d 64 35 2c 68 6d 61 63 2d 73 68 61 mac-md5,hmac-sha 000003c0 32 2d 32 35 36 2d 65 74 6d 40 6f 70 65 6e 73 73 2-256-etm@openss 000003d0 68 2e 63 6f 6d 2c 68 6d 61 63 2d 73 68 61 31 2d h.com,hmac-sha1- 000003e0 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 2c etm@openssh.com, 000003f0 68 6d 61 63 2d 73 68 61 31 2d 39 36 2d 65 74 6d hmac-sha1-96-etm 00000400 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 2c 68 6d 61 @openssh.com,hma 00000410 63 2d 6d 64 35 2d 65 74 6d 40 6f 70 65 6e 73 73 c-md5-etm@openss 00000420 68 2e 63 6f 6d 00 00 00 09 6e 6f 6e 65 2c 7a 6c h.com....none,zl 00000430 69 62 00 00 00 09 6e 6f 6e 65 2c 7a 6c 69 62 00 ib....none,zlib. 00000440 00 00 00 00 00 00 00 00 00 00 00 00 20 ba 1d c2 ............ ... Incoming raw data at 2018-03-23 13:10:39 00000000 00 00 04 fc 0a 14 c9 0a d0 8b c7 09 f2 9e 9e af ................ 00000010 da 58 ed fa 58 7a 00 00 01 40 63 75 72 76 65 32 .X..Xz...@curve2 00000020 35 35 31 39 2d 73 68 61 32 35 36 2c 63 75 72 76 5519-sha256,curv 00000030 65 32 35 35 31 39 2d 73 68 61 32 35 36 40 6c 69 e25519-sha256@li 00000040 62 73 73 68 2e 6f 72 67 2c 65 63 64 68 2d 73 68 bssh.org,ecdh-sh 00000050 61 32 2d 6e 69 73 74 70 32 35 36 2c 65 63 64 68 a2-nistp256,ecdh 00000060 2d 73 68 61 32 2d 6e 69 73 74 70 33 38 34 2c 65 -sha2-nistp384,e 00000070 63 64 68 2d 73 68 61 32 2d 6e 69 73 74 70 35 32 cdh-sha2-nistp52 00000080 31 2c 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 1,diffie-hellman 00000090 2d 67 72 6f 75 70 2d 65 78 63 68 61 6e 67 65 2d -group-exchange- 000000a0 73 68 61 32 35 36 2c 64 69 66 66 69 65 2d 68 65 sha256,diffie-he 000000b0 6c 6c 6d 61 6e 2d 67 72 6f 75 70 31 36 2d 73 68 llman-group16-sh 000000c0 61 35 31 32 2c 64 69 66 66 69 65 2d 68 65 6c 6c a512,diffie-hell 000000d0 6d 61 6e 2d 67 72 6f 75 70 31 38 2d 73 68 61 35 man-group18-sha5 000000e0 31 32 2c 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 12,diffie-hellma 000000f0 6e 2d 67 72 6f 75 70 2d 65 78 63 68 61 6e 67 65 n-group-exchange 00000100 2d 73 68 61 31 2c 64 69 66 66 69 65 2d 68 65 6c -sha1,diffie-hel 00000110 6c 6d 61 6e 2d 67 72 6f 75 70 31 34 2d 73 68 61 lman-group14-sha 00000120 32 35 36 2c 64 69 66 66 69 65 2d 68 65 6c 6c 6d 256,diffie-hellm 00000130 61 6e 2d 67 72 6f 75 70 31 34 2d 73 68 61 31 2c an-group14-sha1, 00000140 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 diffie-hellman-g 00000150 72 6f 75 70 31 2d 73 68 61 31 00 00 00 41 73 73 roup1-sha1...Ass 00000160 68 2d 72 73 61 2c 72 73 61 2d 73 68 61 32 2d 35 h-rsa,rsa-sha2-5 00000170 31 32 2c 72 73 61 2d 73 68 61 32 2d 32 35 36 2c 12,rsa-sha2-256, 00000180 65 63 64 73 61 2d 73 68 61 32 2d 6e 69 73 74 70 ecdsa-sha2-nistp 00000190 32 35 36 2c 73 73 68 2d 65 64 32 35 35 31 39 00 256,ssh-ed25519. 000001a0 00 00 af 63 68 61 63 68 61 32 30 2d 70 6f 6c 79 ...chacha20-poly 000001b0 31 33 30 35 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 1305@openssh.com 000001c0 2c 61 65 73 31 32 38 2d 63 74 72 2c 61 65 73 31 ,aes128-ctr,aes1 000001d0 39 32 2d 63 74 72 2c 61 65 73 32 35 36 2d 63 74 92-ctr,aes256-ct 000001e0 72 2c 61 65 73 31 32 38 2d 67 63 6d 40 6f 70 65 r,aes128-gcm@ope 000001f0 6e 73 73 68 2e 63 6f 6d 2c 61 65 73 32 35 36 2d nssh.com,aes256- 00000200 67 63 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 2c gcm@openssh.com, 00000210 61 65 73 31 32 38 2d 63 62 63 2c 61 65 73 31 39 aes128-cbc,aes19 00000220 32 2d 63 62 63 2c 61 65 73 32 35 36 2d 63 62 63 2-cbc,aes256-cbc 00000230 2c 62 6c 6f 77 66 69 73 68 2d 63 62 63 2c 63 61 ,blowfish-cbc,ca 00000240 73 74 31 32 38 2d 63 62 63 2c 33 64 65 73 2d 63 st128-cbc,3des-c 00000250 62 63 00 00 00 af 63 68 61 63 68 61 32 30 2d 70 bc....chacha20-p 00000260 6f 6c 79 31 33 30 35 40 6f 70 65 6e 73 73 68 2e oly1305@openssh. 00000270 63 6f 6d 2c 61 65 73 31 32 38 2d 63 74 72 2c 61 com,aes128-ctr,a 00000280 65 73 31 39 32 2d 63 74 72 2c 61 65 73 32 35 36 es192-ctr,aes256 00000290 2d 63 74 72 2c 61 65 73 31 32 38 2d 67 63 6d 40 -ctr,aes128-gcm@ 000002a0 6f 70 65 6e 73 73 68 2e 63 6f 6d 2c 61 65 73 32 openssh.com,aes2 000002b0 35 36 2d 67 63 6d 40 6f 70 65 6e 73 73 68 2e 63 56-gcm@openssh.c 000002c0 6f 6d 2c 61 65 73 31 32 38 2d 63 62 63 2c 61 65 om,aes128-cbc,ae 000002d0 73 31 39 32 2d 63 62 63 2c 61 65 73 32 35 36 2d s192-cbc,aes256- 000002e0 63 62 63 2c 62 6c 6f 77 66 69 73 68 2d 63 62 63 cbc,blowfish-cbc 000002f0 2c 63 61 73 74 31 32 38 2d 63 62 63 2c 33 64 65 ,cast128-cbc,3de 00000300 73 2d 63 62 63 00 00 00 d5 75 6d 61 63 2d 36 34 s-cbc....umac-64 00000310 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d -etm@openssh.com 00000320 2c 75 6d 61 63 2d 31 32 38 2d 65 74 6d 40 6f 70 ,umac-128-etm@op 00000330 65 6e 73 73 68 2e 63 6f 6d 2c 68 6d 61 63 2d 73 enssh.com,hmac-s 00000340 68 61 32 2d 32 35 36 2d 65 74 6d 40 6f 70 65 6e ha2-256-etm@open 00000350 73 73 68 2e 63 6f 6d 2c 68 6d 61 63 2d 73 68 61 ssh.com,hmac-sha 00000360 32 2d 35 31 32 2d 65 74 6d 40 6f 70 65 6e 73 73 2-512-etm@openss 00000370 68 2e 63 6f 6d 2c 68 6d 61 63 2d 73 68 61 31 2d h.com,hmac-sha1- 00000380 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 2c etm@openssh.com, 00000390 75 6d 61 63 2d 36 34 40 6f 70 65 6e 73 73 68 2e umac-64@openssh. 000003a0 63 6f 6d 2c 75 6d 61 63 2d 31 32 38 40 6f 70 65 com,umac-128@ope 000003b0 6e 73 73 68 2e 63 6f 6d 2c 68 6d 61 63 2d 73 68 nssh.com,hmac-sh 000003c0 61 32 2d 32 35 36 2c 68 6d 61 63 2d 73 68 61 32 a2-256,hmac-sha2 000003d0 2d 35 31 32 2c 68 6d 61 63 2d 73 68 61 31 00 00 -512,hmac-sha1.. 000003e0 00 d5 75 6d 61 63 2d 36 34 2d 65 74 6d 40 6f 70 ..umac-64-etm@op 000003f0 65 6e 73 73 68 2e 63 6f 6d 2c 75 6d 61 63 2d 31 enssh.com,umac-1 00000400 32 38 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 28-etm@openssh.c 00000410 6f 6d 2c 68 6d 61 63 2d 73 68 61 32 2d 32 35 36 om,hmac-sha2-256 00000420 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d -etm@openssh.com 00000430 2c 68 6d 61 63 2d 73 68 61 32 2d 35 31 32 2d 65 ,hmac-sha2-512-e 00000440 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 2c 68 tm@openssh.com,h 00000450 6d 61 63 2d 73 68 61 31 2d 65 74 6d 40 6f 70 65 mac-sha1-etm@ope 00000460 6e 73 73 68 2e 63 6f 6d 2c 75 6d 61 63 2d 36 34 nssh.com,umac-64 00000470 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 2c 75 6d 61 @openssh.com,uma 00000480 63 2d 31 32 38 40 6f 70 65 6e 73 73 68 2e 63 6f c-128@openssh.co 00000490 6d 2c 68 6d 61 63 2d 73 68 61 32 2d 32 35 36 2c m,hmac-sha2-256, 000004a0 68 6d 61 63 2d 73 68 61 32 2d 35 31 32 2c 68 6d hmac-sha2-512,hm 000004b0 61 63 2d 73 68 61 31 00 00 00 15 6e 6f 6e 65 2c ac-sha1....none, 000004c0 7a 6c 69 62 40 6f 70 65 6e 73 73 68 2e 63 6f 6d zlib@openssh.com 000004d0 00 00 00 15 6e 6f 6e 65 2c 7a 6c 69 62 40 6f 70 ....none,zlib@op 000004e0 65 6e 73 73 68 2e 63 6f 6d 00 00 00 00 00 00 00 enssh.com....... 000004f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ Incoming packet #0x0, type 20 / 0x14 (SSH2_MSG_KEXINIT) 00000000 c9 0a d0 8b c7 09 f2 9e 9e af da 58 ed fa 58 7a ...........X..Xz 00000010 00 00 01 40 63 75 72 76 65 32 35 35 31 39 2d 73 ...@curve25519-s 00000020 68 61 32 35 36 2c 63 75 72 76 65 32 35 35 31 39 ha256,curve25519 00000030 2d 73 68 61 32 35 36 40 6c 69 62 73 73 68 2e 6f -sha256@libssh.o 00000040 72 67 2c 65 63 64 68 2d 73 68 61 32 2d 6e 69 73 rg,ecdh-sha2-nis 00000050 74 70 32 35 36 2c 65 63 64 68 2d 73 68 61 32 2d tp256,ecdh-sha2- 00000060 6e 69 73 74 70 33 38 34 2c 65 63 64 68 2d 73 68 nistp384,ecdh-sh 00000070 61 32 2d 6e 69 73 74 70 35 32 31 2c 64 69 66 66 a2-nistp521,diff 00000080 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 ie-hellman-group 00000090 2d 65 78 63 68 61 6e 67 65 2d 73 68 61 32 35 36 -exchange-sha256 000000a0 2c 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d ,diffie-hellman- 000000b0 67 72 6f 75 70 31 36 2d 73 68 61 35 31 32 2c 64 group16-sha512,d 000000c0 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 iffie-hellman-gr 000000d0 6f 75 70 31 38 2d 73 68 61 35 31 32 2c 64 69 66 oup18-sha512,dif 000000e0 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 fie-hellman-grou 000000f0 70 2d 65 78 63 68 61 6e 67 65 2d 73 68 61 31 2c p-exchange-sha1, 00000100 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 diffie-hellman-g 00000110 72 6f 75 70 31 34 2d 73 68 61 32 35 36 2c 64 69 roup14-sha256,di 00000120 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f ffie-hellman-gro 00000130 75 70 31 34 2d 73 68 61 31 2c 64 69 66 66 69 65 up14-sha1,diffie 00000140 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 31 2d -hellman-group1- 00000150 73 68 61 31 00 00 00 41 73 73 68 2d 72 73 61 2c sha1...Assh-rsa, 00000160 72 73 61 2d 73 68 61 32 2d 35 31 32 2c 72 73 61 rsa-sha2-512,rsa 00000170 2d 73 68 61 32 2d 32 35 36 2c 65 63 64 73 61 2d -sha2-256,ecdsa- 00000180 73 68 61 32 2d 6e 69 73 74 70 32 35 36 2c 73 73 sha2-nistp256,ss 00000190 68 2d 65 64 32 35 35 31 39 00 00 00 af 63 68 61 h-ed25519....cha 000001a0 63 68 61 32 30 2d 70 6f 6c 79 31 33 30 35 40 6f cha20-poly1305@o 000001b0 70 65 6e 73 73 68 2e 63 6f 6d 2c 61 65 73 31 32 penssh.com,aes12 000001c0 38 2d 63 74 72 2c 61 65 73 31 39 32 2d 63 74 72 8-ctr,aes192-ctr 000001d0 2c 61 65 73 32 35 36 2d 63 74 72 2c 61 65 73 31 ,aes256-ctr,aes1 000001e0 32 38 2d 67 63 6d 40 6f 70 65 6e 73 73 68 2e 63 28-gcm@openssh.c 000001f0 6f 6d 2c 61 65 73 32 35 36 2d 67 63 6d 40 6f 70 om,aes256-gcm@op 00000200 65 6e 73 73 68 2e 63 6f 6d 2c 61 65 73 31 32 38 enssh.com,aes128 00000210 2d 63 62 63 2c 61 65 73 31 39 32 2d 63 62 63 2c -cbc,aes192-cbc, 00000220 61 65 73 32 35 36 2d 63 62 63 2c 62 6c 6f 77 66 aes256-cbc,blowf 00000230 69 73 68 2d 63 62 63 2c 63 61 73 74 31 32 38 2d ish-cbc,cast128- 00000240 63 62 63 2c 33 64 65 73 2d 63 62 63 00 00 00 af cbc,3des-cbc.... 00000250 63 68 61 63 68 61 32 30 2d 70 6f 6c 79 31 33 30 chacha20-poly130 00000260 35 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 2c 61 65 5@openssh.com,ae 00000270 73 31 32 38 2d 63 74 72 2c 61 65 73 31 39 32 2d s128-ctr,aes192- 00000280 63 74 72 2c 61 65 73 32 35 36 2d 63 74 72 2c 61 ctr,aes256-ctr,a 00000290 65 73 31 32 38 2d 67 63 6d 40 6f 70 65 6e 73 73 es128-gcm@openss 000002a0 68 2e 63 6f 6d 2c 61 65 73 32 35 36 2d 67 63 6d h.com,aes256-gcm 000002b0 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 2c 61 65 73 @openssh.com,aes 000002c0 31 32 38 2d 63 62 63 2c 61 65 73 31 39 32 2d 63 128-cbc,aes192-c 000002d0 62 63 2c 61 65 73 32 35 36 2d 63 62 63 2c 62 6c bc,aes256-cbc,bl 000002e0 6f 77 66 69 73 68 2d 63 62 63 2c 63 61 73 74 31 owfish-cbc,cast1 000002f0 32 38 2d 63 62 63 2c 33 64 65 73 2d 63 62 63 00 28-cbc,3des-cbc. 00000300 00 00 d5 75 6d 61 63 2d 36 34 2d 65 74 6d 40 6f ...umac-64-etm@o 00000310 70 65 6e 73 73 68 2e 63 6f 6d 2c 75 6d 61 63 2d penssh.com,umac- 00000320 31 32 38 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 128-etm@openssh. 00000330 63 6f 6d 2c 68 6d 61 63 2d 73 68 61 32 2d 32 35 com,hmac-sha2-25 00000340 36 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6-etm@openssh.co 00000350 6d 2c 68 6d 61 63 2d 73 68 61 32 2d 35 31 32 2d m,hmac-sha2-512- 00000360 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 2c etm@openssh.com, 00000370 68 6d 61 63 2d 73 68 61 31 2d 65 74 6d 40 6f 70 hmac-sha1-etm@op 00000380 65 6e 73 73 68 2e 63 6f 6d 2c 75 6d 61 63 2d 36 enssh.com,umac-6 00000390 34 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 2c 75 6d 4@openssh.com,um 000003a0 61 63 2d 31 32 38 40 6f 70 65 6e 73 73 68 2e 63 ac-128@openssh.c 000003b0 6f 6d 2c 68 6d 61 63 2d 73 68 61 32 2d 32 35 36 om,hmac-sha2-256 000003c0 2c 68 6d 61 63 2d 73 68 61 32 2d 35 31 32 2c 68 ,hmac-sha2-512,h 000003d0 6d 61 63 2d 73 68 61 31 00 00 00 d5 75 6d 61 63 mac-sha1....umac 000003e0 2d 36 34 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e -64-etm@openssh. 000003f0 63 6f 6d 2c 75 6d 61 63 2d 31 32 38 2d 65 74 6d com,umac-128-etm 00000400 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 2c 68 6d 61 @openssh.com,hma 00000410 63 2d 73 68 61 32 2d 32 35 36 2d 65 74 6d 40 6f c-sha2-256-etm@o 00000420 70 65 6e 73 73 68 2e 63 6f 6d 2c 68 6d 61 63 2d penssh.com,hmac- 00000430 73 68 61 32 2d 35 31 32 2d 65 74 6d 40 6f 70 65 sha2-512-etm@ope 00000440 6e 73 73 68 2e 63 6f 6d 2c 68 6d 61 63 2d 73 68 nssh.com,hmac-sh 00000450 61 31 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 a1-etm@openssh.c 00000460 6f 6d 2c 75 6d 61 63 2d 36 34 40 6f 70 65 6e 73 om,umac-64@opens 00000470 73 68 2e 63 6f 6d 2c 75 6d 61 63 2d 31 32 38 40 sh.com,umac-128@ 00000480 6f 70 65 6e 73 73 68 2e 63 6f 6d 2c 68 6d 61 63 openssh.com,hmac 00000490 2d 73 68 61 32 2d 32 35 36 2c 68 6d 61 63 2d 73 -sha2-256,hmac-s 000004a0 68 61 32 2d 35 31 32 2c 68 6d 61 63 2d 73 68 61 ha2-512,hmac-sha 000004b0 31 00 00 00 15 6e 6f 6e 65 2c 7a 6c 69 62 40 6f 1....none,zlib@o 000004c0 70 65 6e 73 73 68 2e 63 6f 6d 00 00 00 15 6e 6f penssh.com....no 000004d0 6e 65 2c 7a 6c 69 62 40 6f 70 65 6e 73 73 68 2e ne,zlib@openssh. 000004e0 63 6f 6d 00 00 00 00 00 00 00 00 00 00 00 00 00 com............. Event Log: Doing ECDH key exchange with curve Curve25519 and hash SHA-256 Outgoing packet #0x1, type 30 / 0x1e (SSH2_MSG_KEX_ECDH_INIT) 00000000 00 00 00 20 5d 3d 80 db 69 99 b3 77 0c 8c c9 9d ... ]=..i..w.... 00000010 f6 b0 8b 4c ca 78 57 73 eb a5 57 50 17 34 8e 5d ...L.xWs..WP.4.] 00000020 3f d4 16 2d ?..- Outgoing raw data at 2018-03-23 13:10:39 00000000 00 00 00 2c 06 1e 00 00 00 20 5d 3d 80 db 69 99 ...,..... ]=..i. 00000010 b3 77 0c 8c c9 9d f6 b0 8b 4c ca 78 57 73 eb a5 .w.......L.xWs.. 00000020 57 50 17 34 8e 5d 3f d4 16 2d b9 3d 02 95 96 5f WP.4.]?..-.=..._ Incoming raw data at 2018-03-23 13:10:39 00000000 00 00 00 bc 08 1f 00 00 00 33 00 00 00 0b 73 73 .........3....ss 00000010 68 2d 65 64 32 35 35 31 39 00 00 00 20 99 16 40 h-ed25519... ..@ 00000020 7c 3d 22 32 65 7c 03 ad 4f 5a a6 5f 51 41 29 8c |="2e|..OZ._QA). 00000030 c1 f0 f8 de cf 5b df 82 ee b3 7b a3 4b 00 00 00 .....[....{.K... 00000040 20 b9 0e a2 6d 50 74 ee 5a b9 04 c8 6b 09 93 f4 ...mPt.Z...k... 00000050 ad 73 64 b7 c6 46 c1 1e f0 2d ad a1 79 9a 0b 26 .sd..F...-..y..& 00000060 24 00 00 00 53 00 00 00 0b 73 73 68 2d 65 64 32 $...S....ssh-ed2 00000070 35 35 31 39 00 00 00 40 9f 20 bc 04 fc 6d c1 64 5519...@. ...m.d 00000080 8c 9e ad 5c e3 51 f6 b3 83 77 5b 3f c5 02 36 0f ...\.Q...w[?..6. 00000090 05 9f 9c aa a6 b5 63 14 48 ef 02 82 e8 03 e3 ee ......c.H....... 000000a0 70 d3 29 53 f0 b4 54 c2 ae 9f 36 ab 68 44 23 4b p.)S..T...6.hD#K 000000b0 39 b1 10 3a af 92 0f 06 00 00 00 00 00 00 00 00 9..:............ 000000c0 00 00 00 0c 0a 15 00 00 00 00 00 00 00 00 00 00 ................ Incoming packet #0x1, type 31 / 0x1f (SSH2_MSG_KEX_ECDH_REPLY) 00000000 00 00 00 33 00 00 00 0b 73 73 68 2d 65 64 32 35 ...3....ssh-ed25 00000010 35 31 39 00 00 00 20 99 16 40 7c 3d 22 32 65 7c 519... ..@|="2e| 00000020 03 ad 4f 5a a6 5f 51 41 29 8c c1 f0 f8 de cf 5b ..OZ._QA)......[ 00000030 df 82 ee b3 7b a3 4b 00 00 00 20 b9 0e a2 6d 50 ....{.K... ...mP 00000040 74 ee 5a b9 04 c8 6b 09 93 f4 ad 73 64 b7 c6 46 t.Z...k....sd..F 00000050 c1 1e f0 2d ad a1 79 9a 0b 26 24 00 00 00 53 00 ...-..y..&$...S. 00000060 00 00 0b 73 73 68 2d 65 64 32 35 35 31 39 00 00 ...ssh-ed25519.. 00000070 00 40 9f 20 bc 04 fc 6d c1 64 8c 9e ad 5c e3 51 .@. ...m.d...\.Q 00000080 f6 b3 83 77 5b 3f c5 02 36 0f 05 9f 9c aa a6 b5 ...w[?..6....... 00000090 63 14 48 ef 02 82 e8 03 e3 ee 70 d3 29 53 f0 b4 c.H.......p.)S.. 000000a0 54 c2 ae 9f 36 ab 68 44 23 4b 39 b1 10 3a af 92 T...6.hD#K9..:.. 000000b0 0f 06 .. Event Log: Server also has ecdsa-sha2-nistp256/ssh-rsa host keys, but we don't know any of them Event Log: Host key fingerprint is: Event Log: ssh-ed25519 256 f0:e6:9b:1d:87:ce:60:bb:85:50:2a:0c:10:42:b6:9e Outgoing packet #0x2, type 21 / 0x15 (SSH2_MSG_NEWKEYS) Outgoing raw data at 2018-03-23 13:10:39 00000000 00 00 00 0c 0a 15 78 00 e9 73 e6 30 20 f7 6e e8 ......x..s.0 .n. Event Log: Initialised AES-256 SDCTR client->server encryption Event Log: Initialised HMAC-SHA-256 client->server MAC algorithm Outgoing raw data at 2018-03-23 13:10:39 Incoming packet #0x2, type 21 / 0x15 (SSH2_MSG_NEWKEYS) Event Log: Initialised AES-256 SDCTR server->client encryption Event Log: Initialised HMAC-SHA-256 server->client MAC algorithm Outgoing packet #0x3, type 5 / 0x05 (SSH2_MSG_SERVICE_REQUEST) 00000000 00 00 00 0c 73 73 68 2d 75 73 65 72 61 75 74 68 ....ssh-userauth Outgoing raw data at 2018-03-23 13:10:39 00000000 42 33 98 23 5f 78 37 9d f8 19 10 04 32 47 5d 51 B3.#_x7.....2G]Q 00000010 54 43 e0 7b 51 8a c3 0a 9e 75 da 31 c0 51 13 63 TC.{Q....u.1.Q.c 00000020 19 7c 88 ca eb cc bc a0 80 97 66 1e a0 08 e8 f4 .|........f..... 00000030 c8 39 5c 0b ef 23 56 5c 43 55 5e f6 f3 a4 46 76 .9\..#V\CU^...Fv Incoming raw data at 2018-03-23 13:10:39 00000000 f8 03 a3 12 1c ba e1 5c fa 06 54 31 bd 93 2c be .......\..T1..,.
|
|
#6
03-23-2018, 02:14 PM
|
|||
|
|||
|
00000010 b6 ae c7 dc 82 de ea fb 66 96 97 b8 9b 54 cd 86 ........f....T..
00000020 95 71 1c 0f 0b e6 7a c2 5d e4 dc e4 7a e9 91 c6 .q....z.]...z... 00000030 2d 19 5e ee f1 57 e4 db 10 a1 95 4e 7e 62 5d 80 -.^..W.....N~b]. Incoming packet #0x3, type 6 / 0x06 (SSH2_MSG_SERVICE_ACCEPT) 00000000 00 00 00 0c 73 73 68 2d 75 73 65 72 61 75 74 68 ....ssh-userauth Outgoing packet #0x4, type 50 / 0x32 (SSH2_MSG_USERAUTH_REQUEST) 00000000 00 00 00 04 72 6f 6f 74 00 00 00 0e 73 73 68 2d ....root....ssh- 00000010 63 6f 6e 6e 65 63 74 69 6f 6e 00 00 00 04 6e 6f connection....no 00000020 6e 65 ne Outgoing raw data at 2018-03-23 13:10:40 00000000 fc 16 4c 2f 93 bd 9f f6 dc 56 16 65 24 3f 0d a0 ..L/.....V.e$?.. 00000010 4f 64 52 97 88 dc 37 8b d4 a6 5c 6f 4d 5a 1c ee OdR...7...\oMZ.. 00000020 45 95 ae 5e c2 69 8d 1f 87 21 90 61 62 ba ce f4 E..^.i...!.ab... 00000030 cc 34 88 8d 16 40 25 92 35 fb 7d e6 8f 67 00 2c .4...@%.5.}..g., 00000040 79 60 35 19 f1 34 ac 19 b5 ef 07 1f 3f b5 ac 53 y`5..4......?..S Incoming raw data at 2018-03-23 13:10:40 00000000 67 bd 66 85 ff 66 27 dc 93 25 90 a9 00 75 97 6f g.f..f'..%...u.o 00000010 f5 8f 3e 4f 9a 1e d9 1c 4e 37 16 73 9c 8b e9 97 ..>O....N7.s.... 00000020 9a af a7 94 7d c0 8d df 4e 13 f1 07 7d 53 58 7a ....}...N...}SXz 00000030 7d 73 ba 7c b0 da 1d 1b bd f9 3b 35 d3 d5 0e a3 }s.|......;5.... 00000040 81 32 1c 55 b1 ac e0 9a db ac 91 d0 f4 c9 8c 16 .2.U............ 00000050 23 0c df 3c 21 e1 34 2b 6c ab a7 52 77 3a 3a 1c #..<!.4+l..Rw::. Incoming packet #0x4, type 51 / 0x33 (SSH2_MSG_USERAUTH_FAILURE) 00000000 00 00 00 2f 70 75 62 6c 69 63 6b 65 79 2c 67 73 .../publickey,gs 00000010 73 61 70 69 2d 6b 65 79 65 78 2c 67 73 73 61 70 sapi-keyex,gssap 00000020 69 2d 77 69 74 68 2d 6d 69 63 2c 70 61 73 73 77 i-with-mic,passw 00000030 6f 72 64 00 ord. Event Log: Using SSPI from SECUR32.DLL Event Log: Attempting GSSAPI authentication Outgoing packet #0x5, type 50 / 0x32 (SSH2_MSG_USERAUTH_REQUEST) 00000000 00 00 00 04 72 6f 6f 74 00 00 00 0e 73 73 68 2d ....root....ssh- 00000010 63 6f 6e 6e 65 63 74 69 6f 6e 00 00 00 0f 67 73 connection....gs 00000020 73 61 70 69 2d 77 69 74 68 2d 6d 69 63 00 00 00 sapi-with-mic... 00000030 01 00 00 00 0b 06 09 2a 86 48 86 f7 12 01 02 02 .......*.H...... Outgoing raw data at 2018-03-23 13:10:40 00000000 7b ba 45 04 40 bc 58 b4 a4 ba 41 51 25 23 9f 26 {.E.@.X...AQ%#.& 00000010 21 e7 45 d0 6c 29 3d 77 db ba 27 ba 4e 80 32 73 !.E.l)=w..'.N.2s 00000020 2c 35 c6 c4 d1 ee a5 c6 3b 93 4d 02 71 be 61 ad ,5......;.M.q.a. 00000030 e0 3c 94 11 f8 dd 73 eb 6a ae 1b 6b f0 77 42 42 .<....s.j..k.wBB 00000040 2a 8a c8 84 88 42 05 72 4f aa 43 ca 50 8b ee c6 *....B.rO.C.P... 00000050 f2 92 0e 13 8d f6 70 b7 6e dc 32 b4 9d c7 b6 43 ......p.n.2....C 00000060 21 3a d0 c9 80 03 86 6d ec 44 03 a2 fb 0f 94 e8 !:.....m.D...... Incoming raw data at 2018-03-23 13:10:40 00000000 ce 3b 7e 06 f6 67 84 45 b2 54 60 ef 69 47 07 16 .;~..g.E.T`.iG.. 00000010 da c7 0d d4 f3 21 47 a6 2e f8 f5 0d 9e 99 9c c1 .....!G......... 00000020 05 68 ce 64 21 a4 38 ca 66 58 d9 9d 10 5f 60 5d .h.d!.8.fX..._`] 00000030 b0 55 94 f4 70 07 9c 7c 90 d6 5e 68 75 35 8d fe .U..p..|..^hu5.. 00000040 2b cb 3b 46 d5 44 94 e7 d7 f3 55 bc 94 2c 69 9f +.;F.D....U..,i. 00000050 31 0a c6 aa 3b 1a b4 48 34 d2 eb 3c a9 4f 5b 4a 1...;..H4..<.O[J Incoming packet #0x5, type 51 / 0x33 (SSH2_MSG_USERAUTH_FAILURE) 00000000 00 00 00 2f 70 75 62 6c 69 63 6b 65 79 2c 67 73 .../publickey,gs 00000010 73 61 70 69 2d 6b 65 79 65 78 2c 67 73 73 61 70 sapi-keyex,gssap 00000020 69 2d 77 69 74 68 2d 6d 69 63 2c 70 61 73 73 77 i-with-mic,passw 00000030 6f 72 64 00 ord. Event Log: GSSAPI authentication request refused Outgoing packet #0x6, type 50 / 0x32 (SSH2_MSG_USERAUTH_REQUEST) 00000000 00 00 00 04 72 6f 6f 74 00 00 00 0e 73 73 68 2d ....root....ssh- 00000010 63 6f 6e 6e 65 63 74 69 6f 6e 00 00 00 08 70 61 connection....pa 00000020 73 73 77 6f 72 64 00 XX XX XX XX XX XX XX XX XX ssword.XXXXXXXXX 00000030 XX XX XX XX XX XX XX XXXXXXX Outgoing packet #0x7, type 2 / 0x02 (SSH2_MSG_IGNORE) 00000000 00 00 00 90 12 1e 73 a5 9e d3 2c 65 87 cc 96 e7 ......s...,e.... 00000010 cc 67 e9 dd 05 3d c2 7b e5 4f 5d 7f 98 35 cd 3b .g...=.{.O]..5.; 00000020 e9 c7 20 84 06 5e 36 88 95 15 73 b6 37 73 ce 0f .. ..^6...s.7s.. 00000030 98 ad 30 f6 7d 31 0d 7a 48 07 9e 0b 45 5e 83 e7 ..0.}1.zH...E^.. 00000040 7b a2 18 83 68 0d c2 35 27 06 7a 71 32 c5 47 26 {...h..5'.zq2.G& 00000050 13 ee 47 13 cd ec e8 d3 d9 f3 51 54 79 ff 0b cb ..G.......QTy... 00000060 40 47 87 59 1e 6d 7d 05 9a c5 e9 9c 66 d2 36 18 @G.Y.m}.....f.6. 00000070 c7 35 b9 d2 0f 2c 7e 48 28 e5 5a b6 29 6a ca 74 .5...,~H(.Z.)j.t 00000080 42 23 c2 66 6f 76 5c 47 9e f5 1e 07 5c c9 2b 7a B#.fov\G....\.+z 00000090 c3 b5 9b af .... Outgoing raw data at 2018-03-23 13:10:43 00000000 f6 51 23 a9 84 03 c1 3e 89 a7 cf b1 71 f9 09 dc .Q#....>....q... 00000010 b8 da 49 b7 37 9d 34 35 5e 89 de 7d 24 c2 4d c9 ..I.7.45^..}$.M. 00000020 86 a4 aa 0e 37 2a a6 90 63 2f 8e 73 75 4f 0a ff ....7*..c/.suO.. 00000030 0c 2f 66 e2 fc ed 1d a7 9e 5b 54 29 8d 45 b4 31 ./f......[T).E.1 00000040 62 d6 bb 99 83 38 eb 7b b7 2f b4 8d 41 97 e9 54 b....8.{./..A..T 00000050 a0 3b 8e 80 fb 60 86 d9 1d 2f 5c d8 38 72 7e 55 .;...`.../\.8r~U 00000060 0b 6f 9d ae 11 10 89 de 15 8f 20 ac 7a 94 d2 52 .o........ .z..R 00000070 ac a9 c9 d9 2f ec dd b3 fe 49 54 61 6b df 5f c5 ..../....ITak._. 00000080 f1 f2 ac ae b1 a9 f0 37 22 cf 64 3a f3 6c f5 18 .......7".d:.l.. 00000090 07 e0 52 7b 00 7f 81 44 f0 2f e2 52 9b d8 da 38 ..R{...D./.R...8 000000a0 38 91 4e d3 48 21 a9 8e dd 72 0f 42 19 7e 16 5d 8.N.H!...r.B.~.] 000000b0 5b 44 66 65 61 25 98 eb 84 eb c1 9c 15 0a ba fd [Dfea%.......... 000000c0 f1 02 22 7c ef ef 92 c9 ce 87 ae bc ad 08 ba a2 .."|............ 000000d0 cf 70 42 73 1a f4 ce be 87 38 c4 c4 6c 92 b9 dd .pBs.....8..l... 000000e0 74 70 4f bf 3c 24 da bc ff d0 7f af 99 2b 40 d6 tpO.<$.......+@. 000000f0 89 6f d7 4a bb 77 11 db b3 b5 c3 a1 d9 b8 0f 61 .o.J.w.........a 00000100 d1 86 09 cc 4e 96 4e 8d e2 2c d4 e4 ea 48 7a 8e ....N.N..,...Hz. 00000110 92 e8 c2 26 ca 1f 02 3e 95 fe ec 9e c5 b8 02 b4 ...&...>........ 00000120 d5 3b cd a9 2b 11 24 7f 29 86 9a 3c 89 45 62 00 .;..+.$.)..<.Eb. Event Log: Sent password Incoming raw data at 2018-03-23 13:10:45 00000000 b5 30 54 b4 9e 0c a6 83 29 07 00 ab a0 89 ab aa .0T.....)....... 00000010 84 ee 38 a6 6e 8e 2c fc 3d 34 54 09 b0 04 5f 81 ..8.n.,.=4T..._. 00000020 99 f5 44 39 25 b9 85 00 8c d9 9c 13 9c c2 d6 c0 ..D9%........... 00000030 e2 d4 10 06 7a 78 cb fb 3f 65 50 3c b7 d8 4e 22 ....zx..?eP<..N" 00000040 d6 0d 49 0f 84 e8 fa 60 49 6c 2a be 86 90 34 d4 ..I....`Il*...4. 00000050 c7 43 07 c4 3a 67 a2 d4 1c e7 f4 bc 5a 79 b4 22 .C..:g......Zy." Incoming packet #0x6, type 51 / 0x33 (SSH2_MSG_USERAUTH_FAILURE) 00000000 00 00 00 2f 70 75 62 6c 69 63 6b 65 79 2c 67 73 .../publickey,gs 00000010 73 61 70 69 2d 6b 65 79 65 78 2c 67 73 73 61 70 sapi-keyex,gssap 00000020 69 2d 77 69 74 68 2d 6d 69 63 2c 70 61 73 73 77 i-with-mic,passw 00000030 6f 72 64 00 ord. Event Log: Password authentication failed Outgoing packet #0x8, type 50 / 0x32 (SSH2_MSG_USERAUTH_REQUEST) 00000000 00 00 00 04 72 6f 6f 74 00 00 00 0e 73 73 68 2d ....root....ssh- 00000010 63 6f 6e 6e 65 63 74 69 6f 6e 00 00 00 08 70 61 connection....pa 00000020 73 73 77 6f 72 64 00 XX XX XX XX XX XX XX XX XX ssword.XXXXXXXXX 00000030 XX XX XX XX XX XX XX XXXXXXX Outgoing packet #0x9, type 2 / 0x02 (SSH2_MSG_IGNORE) 00000000 00 00 00 90 92 15 1e 15 5f 4e 3b 8f da b3 c3 23 ........_N;....# 00000010 a9 1f 77 c2 e9 c9 d7 af 61 58 74 ff 79 4a 4a 25 ..w.....aXt.yJJ% 00000020 1f 3f 78 21 5e 9e 20 e2 13 1f 78 72 53 6c 96 d7 .?x!^. ...xrSl.. 00000030 2c 3c 23 b0 57 38 e2 8a 91 30 d2 8d 06 7c 18 82 ,<#.W8...0...|.. 00000040 54 d0 34 d4 47 d9 b0 ba c7 f9 dd 5c 85 de f8 77 T.4.G......\...w 00000050 d9 6b c4 f4 51 7e 83 96 31 bc 8b e2 48 d3 24 65 .k..Q~..1...H.$e 00000060 56 3a b3 86 89 fa c7 b2 d1 80 df 1c da 8e 46 39 V:............F9 00000070 06 5f 14 ac 42 b6 1f cb 5c 56 ae f2 e8 95 02 2a ._..B...\V.....* 00000080 a0 69 72 48 b0 98 16 94 19 82 45 da 97 d9 c8 dd .irH......E..... 00000090 50 3f 73 93 P?s. Outgoing raw data at 2018-03-23 13:10:49 00000000 0c a0 4f 73 01 49 9f 07 3f 9e 4c 75 10 0d f9 64 ..Os.I..?.Lu...d 00000010 e8 d4 1e cc d9 9d f4 0e a7 e5 2e ed 15 70 31 56 .............p1V 00000020 54 45 3e f6 20 c7 ef 38 7a 03 c1 80 e6 59 ce bb TE>. ..8z....Y.. 00000030 eb 39 91 2e f1 90 bd b3 29 07 8a 0e 73 ae 74 e4 .9......)...s.t. 00000040 b4 74 b6 fc 61 1a 78 f2 78 d1 94 9d 76 55 a6 b5 .t..a.x.x...vU.. 00000050 36 fa 02 4f fb 06 69 08 8f 08 31 e6 65 03 c4 84 6..O..i...1.e... 00000060 0a eb 19 96 00 57 61 29 1c b1 97 4f 40 6d 0e 3d .....Wa)...O@m.= 00000070 cc 40 b2 de fa 7c ec 5f 05 6e ff fc 9d 26 3d a0 .@...|._.n...&=. 00000080 ac 8e 64 98 fb f9 ce 5a c0 8e 7d f2 4a e0 59 a3 ..d....Z..}.J.Y. 00000090 e3 93 bb be 8d 6f cb fd 4c 72 dd da 5a 42 81 0a .....o..Lr..ZB.. 000000a0 2e f6 d8 4f 59 94 7c 09 9c 7d f3 5b f9 4e 97 f3 ...OY.|..}.[.N.. 000000b0 cf d2 68 c6 8d b1 f1 f1 50 53 e2 ac 8f e9 2a 2b ..h.....PS....*+ 000000c0 8c ad 72 22 f0 2d eb 45 6e e3 7f d5 5f 9d cc ad ..r".-.En..._... 000000d0 ec 70 fa ea 52 d9 7f 00 a4 3f f4 7f 65 18 20 12 .p..R....?..e. . 000000e0 2c 99 ab 03 aa 26 6f 59 ad fc e5 91 28 5a a2 cb ,....&oY....(Z.. 000000f0 e7 b6 5e 8e b8 e7 93 07 cc ad 5f 58 e6 b1 ce eb ..^......._X.... 00000100 75 7c aa b6 cb 51 ac 89 5e 38 2f 2b f2 84 4e a0 u|...Q..^8/+..N. 00000110 e5 72 f3 e7 e1 16 60 6c 43 e4 30 de 02 43 5b db .r....`lC.0..C[. 00000120 d1 48 43 57 d8 ee ee ba 3d 18 6e 67 21 a9 91 79 .HCW....=.ng!..y Event Log: Sent password Incoming raw data at 2018-03-23 13:10:50 00000000 0a b0 4a 2b 49 22 11 cb 39 4c f7 b9 eb 5d 1f 28 ..J+I"..9L...].( 00000010 6b 22 a4 6d e1 54 da 8f 10 22 ab e6 ba 14 9d 62 k".m.T...".....b 00000020 b5 f0 77 71 79 d5 66 aa 48 d6 f2 3a 26 e5 61 2f ..wqy.f.H..:&.a/ Incoming packet #0x7, type 52 / 0x34 (SSH2_MSG_USERAUTH_SUCCESS) Event Log: Access granted Event Log: Opening session as main channel Outgoing packet #0xa, type 90 / 0x5a (SSH2_MSG_CHANNEL_OPEN) 00000000 00 00 00 07 73 65 73 73 69 6f 6e 00 00 01 00 00 ....session..... 00000010 00 40 00 00 00 40 00 .@...@. Outgoing raw data at 2018-03-23 13:10:50 00000000 c1 47 64 f0 95 cf b4 1d 66 e1 94 b2 4b bd 07 c4 .Gd.....f...K... 00000010 d2 4f 93 0a 17 73 59 ae 9e 0a dd 6f 2a cc 38 50 .O...sY....o*.8P 00000020 6e d7 78 72 26 ba 9f 06 78 b3 aa 68 37 c8 87 8a n.xr&...x..h7... 00000030 4b f9 00 7d d0 c3 b1 c6 72 2d 33 33 ae a0 35 69 K..}....r-33..5i 00000040 3b e7 11 93 1d d5 52 f1 33 4d c3 cb 58 05 a6 6a ;.....R.3M..X..j Incoming raw data at 2018-03-23 13:10:53 00000000 9b 9e 0f fd fe 0b 41 cf bf 2b 0d ba 04 fd 6c 7b ......A..+....l{ 00000010 f9 9a b7 1b a3 ed 00 23 ed 4b a8 00 c0 23 d8 dc .......#.K...#.. 00000020 0f 5f b7 ff 78 cd 86 88 a8 a0 b4 2e 5d e9 ba 42 ._..x.......]..B 00000030 d0 cb d1 b1 90 a7 50 30 ad e7 b5 22 7c f1 c9 48 ......P0..."|..H 00000040 8b 06 9c b4 0f 5f cc 4e 5b 7f af ff 3d a1 36 d8 ....._.N[...=.6. 00000050 d1 ba 88 c2 13 f6 56 51 a0 81 16 60 5a 16 7e 59 ......VQ...`Z.~Y 00000060 5a a6 01 b6 61 76 a8 16 ee 66 c7 90 94 d1 22 6c Z...av...f...."l 00000070 90 34 8a b5 80 0b d3 91 e9 3a 45 f4 a2 77 28 0c .4.......:E..w(. 00000080 01 d3 70 ce 71 61 05 e6 0e 2b ea 63 30 6d d2 23 ..p.qa...+.c0m.# 00000090 af 43 ff 28 ae 40 57 1c 1d 52 69 1a d2 78 6e 35 .C.(.@W..Ri..xn5 000000a0 a0 5b c5 ca 6f 15 42 c5 66 f0 a2 be 47 e4 98 eb .[..o.B.f...G... 000000b0 80 26 ca e5 fe 65 25 e6 43 ca 87 7e fd 05 49 fb .&...e%.C..~..I. 000000c0 1c 4d ec 9d 4e 46 cb 6f 17 9b 7e 70 82 ce c5 21 .M..NF.o..~p...! 000000d0 8d 21 0b eb 7d 07 b7 a5 23 b3 c7 c4 c0 ff e2 82 .!..}...#....... 000000e0 c0 cd 4a 6e ff 7f fc 26 42 c1 5b 76 dd 49 37 aa ..Jn...&B.[v.I7. 000000f0 9a 64 b6 84 7b 04 76 58 7d bb b5 7b 7c 31 fa bb .d..{.vX}..{|1.. 00000100 81 f5 d9 26 a1 39 ed 4c 4e 20 68 b5 a1 45 72 ce ...&.9.LN h..Er. 00000110 4d 74 da 99 bc d3 5a 04 5b a8 2e c1 6a db 6f 23 Mt....Z.[...j.o# 00000120 01 80 e2 40 bf e0 51 bd 62 2e 04 c5 63 24 b4 6f ...@..Q.b...c$.o 00000130 3e 25 73 f3 7e 4b 8d 9f 3a 7c a9 80 a3 ae 9e b9 >%s.~K..:|...... 00000140 01 d5 dd 2d 2c 77 c8 2d 70 14 2d ef 2b 89 d4 f2 ...-,w.-p.-.+... 00000150 10 55 5c 1e 1f df c0 ba 0d f4 7a 2f bd 6d 2e 92 .U\.......z/.m.. 00000160 d8 57 98 1b c6 32 65 c2 7b 79 f1 d0 34 ad 02 35 .W...2e.{y..4..5 00000170 67 b7 28 a1 ae 76 b5 91 59 1b 3d df 32 56 ba b1 g.(..v..Y.=.2V.. 00000180 c6 60 87 d7 d0 03 ba 9b 95 4e 31 84 72 d3 60 6a .`.......N1.r.`j 00000190 7a 24 6a 5b 93 c9 f6 5f 82 6c 67 77 ca fd 48 5d z$j[..._.lgw..H] 000001a0 bb 50 05 c1 a7 b2 6a 6c ea 9e 72 84 f4 b2 54 35 .P....jl..r...T5 000001b0 a6 d8 cb 7a 75 25 13 76 ce 7a b1 a9 48 51 37 3f ...zu%.v.z..HQ7? 000001c0 5c 04 65 48 91 02 95 37 cd 96 b0 53 9e b5 5c 29 \.eH...7...S..\) 000001d0 63 d9 ab 29 62 c2 ff f1 08 10 fe d0 7b 3c 3b 99 c..)b.......{<;. 000001e0 1d ec a6 58 0f 08 b7 58 72 39 8d 47 3b 0e e4 a1 ...X...Xr9.G;... 000001f0 d4 fd 24 7e ec 00 3d 2a a6 dc 4e 49 57 8d cd 9e ..$~..=*..NIW... 00000200 24 07 19 e4 8e 07 86 5a ca 2a f0 e9 8d 38 4d 17 $......Z.*...8M. Incoming packet #0x8, type 80 / 0x50 (SSH2_MSG_GLOBAL_REQUEST) 00000000 00 00 00 17 68 6f 73 74 6b 65 79 73 2d 30 30 40 ....hostkeys-00@ 00000010 6f 70 65 6e 73 73 68 2e 63 6f 6d 00 00 00 01 17 openssh.com..... 00000020 00 00 00 07 73 73 68 2d 72 73 61 00 00 00 03 01 ....ssh-rsa..... 00000030 00 01 00 00 01 01 00 cf 61 1f f6 1d a4 19 78 3b ........a.....x; 00000040 be de fd 7d f9 5a 25 13 15 f1 41 47 00 85 4a 31 ...}.Z%...AG..J1 00000050 39 67 02 3e 7a 66 6b 15 f0 f3 9e b5 d1 cb 07 ed 9g.>zfk......... 00000060 2a 7a 5c a9 9e 73 47 6f 76 57 98 fb ad 1e 2b 06 *z\..sGovW....+. 00000070 e2 7a 92 06 16 9c 66 63 62 ed bc d6 50 56 64 58 .z....fcb...PVdX 00000080 00 89 ac a8 19 cc 9e 77 f1 4a fa 7f b6 c1 17 d9 .......w.J...... 00000090 be 84 2a 6f 06 1c 7e 0a 18 a8 de b1 f7 d5 9c 24 ..*o..~........$ 000000a0 50 6d be bd 51 0a cb 4a 4f 19 91 ba f0 b8 7a 04 Pm..Q..JO.....z. 000000b0 f7 96 2a 24 55 0d 91 af c1 90 95 fe f1 a9 64 51 ..*$U.........dQ 000000c0 0f d1 c2 fb 27 b2 87 5e 19 a0 c8 f1 11 04 e0 c3 ....'..^........ 000000d0 47 52 c2 a9 0b 41 8a af 3f 83 3a b6 91 89 16 63 GR...A..?.:....c 000000e0 2d 73 94 37 1f 95 27 e2 13 04 98 b8 e5 72 c8 20 -s.7..'......r. 000000f0 14 5b 10 42 cb 91 9f 24 a6 59 d2 6b 8c ec 2f 13 .[.B...$.Y.k../. 00000100 ce 00 cf b4 25 d7 1c 21 5e 2d 95 cf bd ac 83 48 ....%..!^-.....H 00000110 b6 ec 71 e7 b3 02 b7 17 32 5c cf 27 aa f2 d2 68 ..q.....2\.'...h 00000120 61 21 f6 af 69 90 d2 f3 6b 5a f8 c6 5f 0f 85 7b a!..i...kZ.._..{ 00000130 98 2c 9c 1e 87 ec 41 00 00 00 68 00 00 00 13 65 .,....A...h....e 00000140 63 64 73 61 2d 73 68 61 32 2d 6e 69 73 74 70 32 cdsa-sha2-nistp2 00000150 35 36 00 00 00 08 6e 69 73 74 70 32 35 36 00 00 56....nistp256.. 00000160 00 41 04 00 55 cd 58 33 3c d8 42 0f 36 63 58 15 .A..U.X3<.B.6cX. 00000170 fa d3 ab 27 bd a5 ca 18 fd bb 25 15 ef 9e de ec ...'......%..... 00000180 77 1e 6e 37 5c fb 00 b5 c6 13 3b e0 68 49 73 78 w.n7\.....;.hIsx 00000190 95 e1 e6 65 d0 2d ed dd 26 c2 ce b7 7d a4 f5 f0 ...e.-..&...}... 000001a0 0d ad 54 00 00 00 33 00 00 00 0b 73 73 68 2d 65 ..T...3....ssh-e 000001b0 64 32 35 35 31 39 00 00 00 20 99 16 40 7c 3d 22 d25519... ..@|=" 000001c0 32 65 7c 03 ad 4f 5a a6 5f 51 41 29 8c c1 f0 f8 2e|..OZ._QA).... 000001d0 de cf 5b df 82 ee b3 7b a3 4b ..[....{.K Incoming raw data at 2018-03-23 13:10:53 00000000 60 ff 34 01 41 62 44 73 8a 8f 0a 1a 91 09 e1 bc `.4.AbDs........ 00000010 60 3d 97 26 14 81 ff 62 cc 17 87 37 83 09 52 92 `=.&...b...7..R. 00000020 9b 3b 03 ef 6b 4a 4d 5d 98 78 a5 97 63 cc bb 92 .;..kJM].x..c... 00000030 51 e3 16 34 cd 61 09 88 a2 97 21 61 4e ab 12 e6 Q..4.a....!aN... Incoming packet #0x9, type 91 / 0x5b (SSH2_MSG_CHANNEL_OPEN_CONFIRMATION) 00000000 00 00 01 00 00 00 00 00 00 00 00 00 00 00 80 00 ................ Event Log: Opened main channel Outgoing packet #0xb, type 98 / 0x62 (SSH2_MSG_CHANNEL_REQUEST) 00000000 00 00 00 00 00 00 00 07 70 74 79 2d 72 65 71 01 ........pty-req. 00000010 00 00 00 05 78 74 65 72 6d 00 00 00 50 00 00 00 ....xterm...P... 00000020 18 00 00 00 00 00 00 00 00 00 00 00 15 03 00 00 ................ 00000030 00 7f 2a 00 00 00 01 80 00 00 96 00 81 00 00 96 ..*............. 00000040 00 00 .. Outgoing raw data at 2018-03-23 13:10:53 00000000 e6 93 3c 59 dd f2 16 e4 30 df 2e 35 f9 b4 f7 8b ..<Y....0..5.... 00000010 88 70 fc b2 cb 83 ca 0a eb 1b da e0 da 89 c0 1d .p.............. 00000020 bc fa 8e e6 dc 8c f1 89 0d 13 26 73 95 c8 a1 c3 ..........&s.... 00000030 2f 18 77 1d b7 6b 45 2f 7b 21 37 ef 91 96 14 7a /.w..kE/{!7....z 00000040 09 c4 f7 74 40 91 34 cd 08 d1 c7 b5 13 03 b9 8b ...t@.4......... 00000050 98 ac 1b 15 78 08 f4 53 3a f2 41 ba 28 5c a9 40 ....x..S:.A.(\.@ 00000060 3d d5 06 1b ab 8b 5f 27 e8 8b c7 f1 b9 7b 33 ce =....._'.....{3. Outgoing packet #0xc, type 98 / 0x62 (SSH2_MSG_CHANNEL_REQUEST) 00000000 00 00 00 00 00 00 00 05 73 68 65 6c 6c 01 ........shell. Outgoing raw data at 2018-03-23 13:10:53 00000000 c7 c1 bf 5d 07 d8 7c 4b 30 02 e0 65 60 85 d7 17 ...]..|K0..e`... 00000010 f5 2b 34 0f 89 53 af 7d 59 83 54 7f ad 13 ed 1f .+4..S.}Y.T..... 00000020 7d a4 6c 46 65 db d8 8d 4f e0 3a 9c d2 9e 9a 2e }.lFe...O.:..... 00000030 cd 13 c5 bb a8 b1 6d 9c 4c e8 e1 f7 36 03 02 8f ......m.L...6... Incoming raw data at 2018-03-23 13:10:53 00000000 31 ab 50 30 b9 2a 45 3d 64 09 75 1d b5 5e fd b1 1.P0.*E=d.u..^.. 00000010 cd 18 d2 e3 38 cf 5d 74 75 ba 3c a9 c5 7d d0 9c ....8.]tu.<..}.. 00000020 c4 74 91 02 2c 4d de a7 74 14 bc bb 64 4a 6c 48 .t..,M..t...dJlH 00000030 df 0a 3a 0a 86 7e 29 4c d1 b9 60 26 d1 54 61 e4 ..:..~)L..`&.Ta. 00000040 17 19 86 69 9b b5 58 16 9e 30 2a 66 10 da 35 e4 ...i..X..0*f..5. 00000050 2c fd f9 c7 ac 99 94 3c 1c e9 30 98 3e 18 d1 20 ,......<..0.>.. 00000060 d6 a4 1a b5 cf b1 f3 6d 76 66 c2 bb 7a 9b 7e bd .......mvf..z.~. 00000070 a9 d5 ba 5e 07 a9 fb 29 d8 58 d4 97 2f 80 bd c8 ...^...).X../... 00000080 d0 67 2a 62 d5 61 69 7c 84 f4 8a 40 4f 4d fa 51 .g*b.ai|...@OM.Q 00000090 91 7f 41 91 e5 0a 39 c1 49 4f 07 e7 de 20 52 c5 ..A...9.IO... R. Incoming packet #0xa, type 99 / 0x63 (SSH2_MSG_CHANNEL_SUCCESS) 00000000 00 00 01 00 .... Event Log: Allocated pty (ospeed 38400bps, ispeed 38400bps) Incoming packet #0xb, type 93 / 0x5d (SSH2_MSG_CHANNEL_WINDOW_ADJUST) 00000000 00 00 01 00 00 20 00 00 ..... .. Incoming packet #0xc, type 99 / 0x63 (SSH2_MSG_CHANNEL_SUCCESS) 00000000 00 00 01 00 .... Event Log: Started a shell/command Incoming raw data at 2018-03-23 13:10:54 00000000 7a e5 70 06 38 50 fb 86 dd 99 20 ed 68 52 15 7d z.p.8P.... .hR.} 00000010 69 07 58 51 5b d1 5c 94 8d 80 35 c6 28 ec 12 b2 i.XQ[.\...5.(... 00000020 ca d7 17 6c 6d 34 f7 db d9 0f 66 e3 9d 7b 29 de ...lm4....f..{). 00000030 34 f5 67 d0 40 dd 15 d9 92 cd a8 8b 75 7a c9 7e 4.g.@.......uz.~ 00000040 f7 88 2f 5b 02 64 77 4b 57 6e c7 95 9b e7 3f ee ../[.dwKWn....?. 00000050 46 22 b1 2b 80 c2 ad fe 98 f5 e3 17 ec c7 cb a3 F".+............ 00000060 07 ed 46 3f 87 84 be 02 7c 9c 04 6d 88 3f d5 9e ..F?....|..m.?.. 00000070 64 9f e3 ba 7c d7 8d 88 d8 33 fd df ba f9 b4 22 d...|....3....." 00000080 f6 9c ed 69 6c fd 2b a7 3c 91 65 7f 95 ff 32 e2 ...il.+.<.e...2. 00000090 3d 50 3b f8 eb 1e 8f 20 b9 57 df c3 2e 92 5a 61 =P;.... .W....Za 000000a0 a0 d5 c0 2c 7f 35 1c 09 6a 4a dc f2 0a 55 b2 c4 ...,.5..jJ...U.. 000000b0 c3 32 46 7e 64 80 ac 41 03 37 bc 0a e4 b0 6f 8a .2F~d..A.7....o. 000000c0 e3 67 1b 5d 37 08 bb cd b7 c8 38 7c 26 d6 1b 22 .g.]7.....8|&.." 000000d0 09 b8 20 d7 df 90 58 ad a9 3c 22 eb 34 a3 0c f7 .. ...X..<".4... 000000e0 3a 71 0b 6b d0 f9 1b 58 cb 8b 72 cd e4 18 e4 c0 :q.k...X..r..... 000000f0 81 51 68 29 5d 1a 58 37 15 30 72 ca 29 dd 29 a2 .Qh)].X7.0r.).). 00000100 92 af 65 2b 2a a2 9c e8 33 92 0a ad 22 73 6c df ..e+*...3..."sl. 00000110 6c d7 d4 c0 cf 8a 52 cb 29 25 1c 27 9b 8e ad 41 l.....R.)%.'...A 00000120 7b fe 50 5c c2 7f 3d 6d d3 f1 8c 1f bf 32 75 ef {.P\..=m.....2u. Incoming packet #0xd, type 94 / 0x5e (SSH2_MSG_CHANNEL_DATA) 00000000 00 00 01 00 00 00 00 fa 4c 61 73 74 20 66 61 69 ........Last fai 00000010 6c 65 64 20 6c 6f 67 69 6e 3a 20 46 72 69 20 4d led login: Fri M 00000020 61 72 20 32 33 20 32 30 3a 31 30 3a 34 36 20 55 ar 23 20:10:46 U 00000030 54 43 20 32 30 31 38 20 66 72 6f 6d 20 63 2d 37 TC 2018 from c-7 00000040 33 2d 31 36 32 2d 31 38 35 2d 37 30 2e 68 73 64 3-162-185-70.hsd 00000050 31 2e 63 61 2e 63 6f 6d 63 61 73 74 2e 6e 65 74 1.ca.comcast.net 00000060 20 6f 6e 20 73 73 68 3a 6e 6f 74 74 79 0d 0a 54 on ssh:notty..T 00000070 68 65 72 65 20 77 61 73 20 31 20 66 61 69 6c 65 here was 1 faile 00000080 64 20 6c 6f 67 69 6e 20 61 74 74 65 6d 70 74 20 d login attempt 00000090 73 69 6e 63 65 20 74 68 65 20 6c 61 73 74 20 73 since the last s 000000a0 75 63 63 65 73 73 66 75 6c 20 6c 6f 67 69 6e 2e uccessful login. 000000b0 0d 0a 4c 61 73 74 20 6c 6f 67 69 6e 3a 20 46 72 ..Last login: Fr 000000c0 69 20 4d 61 72 20 32 33 20 32 30 3a 30 39 3a 34 i Mar 23 20:09:4 000000d0 38 20 32 30 31 38 20 66 72 6f 6d 20 63 2d 37 33 8 2018 from c-73 000000e0 2d 31 36 32 2d 31 38 35 2d 37 30 2e 68 73 64 31 -162-185-70.hsd1 000000f0 2e 63 61 2e 63 6f 6d 63 61 73 74 2e 6e 65 74 0d .ca.comcast.net. 00000100 0d 0a .. Incoming raw data at 2018-03-23 13:10:55 00000000 21 56 cc 7d d8 19 0d a7 0a a5 b5 1a f2 c7 96 28 !V.}...........( 00000010 3f 89 27 c5 9b 97 12 61 3d 1e 5f 09 3c 84 11 7a ?.'....a=._.<..z 00000020 41 5a 58 1c 08 b5 93 de 2d 9f 8f 3a 47 fe 1e e5 AZX.....-..:G... 00000030 5b eb 20 57 e6 c9 42 c3 98 97 66 03 83 bd ed 41 [. W..B...f....A 00000040 c5 1f 28 c8 79 cf cb 1e 56 aa 30 6a 25 7c 6e 00 ..(.y...V.0j%|n. Incoming packet #0xe, type 94 / 0x5e (SSH2_MSG_CHANNEL_DATA) 00000000 00 00 01 00 00 00 00 17 1b 5d 30 3b 72 6f 6f 74 .........]0;root 00000010 40 6e 6f 76 61 6a 65 77 65 6c 72 79 3a 7e 07 @novajewelry:~. Incoming raw data at 2018-03-23 13:10:55 00000000 a9 20 53 0c 58 88 0b 98 3c 98 4e 6d e1 cd cf ca . S.X...<.Nm.... 00000010 02 b0 f7 23 ec 83 8d d3 fe 60 65 17 01 24 d6 e8 ...#.....`e..$.. 00000020 fc be ce c7 88 fc 6a 26 d0 ea bd 54 95 ba 48 a4 ......j&...T..H. 00000030 1e db e8 44 2a 9f ec 8a 32 40 5a 1a d0 15 a7 43 ...D*...2@Z....C 00000040 ad 0f ba 72 01 cb a8 4a ba 6b ba d2 4c be da f1 ...r...J.k..L... Incoming packet #0xf, type 94 / 0x5e (SSH2_MSG_CHANNEL_DATA) 00000000 00 00 01 00 00 00 00 1e 1b 5b 3f 31 30 33 34 68 .........[?1034h 00000010 5b 72 6f 6f 74 40 6e 6f 76 61 6a 65 77 65 6c 72 [root@novajewelr 00000020 79 20 7e 5d 23 20 y ~]# Outgoing packet #0xd, type 94 / 0x5e (SSH2_MSG_CHANNEL_DATA) 00000000 00 00 00 00 00 00 00 01 65 ........e Outgoing raw data at 2018-03-23 13:11:02 00000000 7d c7 93 cb 46 36 84 10 12 cd 63 34 9b e0 0d bf }...F6....c4.... 00000010 6a 6d 6b 73 5a 69 96 a9 cf 2d 5a aa a5 48 fa 53 jmksZi...-Z..H.S 00000020 33 f5 81 72 f0 f4 be 3d 31 db 65 4c 6d 91 88 a6 3..r...=1.eLm... 00000030 cf 55 58 c7 0e 46 f2 29 b2 e8 6e 96 86 21 d6 05 .UX..F.)..n..!.. Incoming raw data at 2018-03-23 13:11:02 00000000 54 b8 71 fb 31 f2 0b b8 69 1f 5f 02 71 27 96 c1 T.q.1...i._.q'.. 00000010 fb c2 e9 bb c3 71 91 08 3e a0 ea 38 99 41 9c 42 .....q..>..8.A.B 00000020 7e 26 ad 4b 6d da e1 de 63 db 44 91 0d 00 aa 82 ~&.Km...c.D..... 00000030 1e 26 65 23 ac fe 21 74 a0 17 a1 3f 57 86 83 e0 .&e#..!t...?W... Incoming packet #0x10, type 94 / 0x5e (SSH2_MSG_CHANNEL_DATA) 00000000 00 00 01 00 00 00 00 01 65 ........e Outgoing packet #0xe, type 94 / 0x5e (SSH2_MSG_CHANNEL_DATA) 00000000 00 00 00 00 00 00 00 01 78 ........x Outgoing raw data at 2018-03-23 13:11:02 00000000 72 08 73 38 38 a0 52 b8 93 30 a8 a4 bc a4 40 43 r.s88.R..0....@C 00000010 39 50 ae 3d 91 10 d4 e4 69 66 fb 65 58 ff 6b 0c 9P.=....if.eX.k. 00000020 17 7c 28 9b 66 b0 ef 4d e5 6f 2f 24 aa 67 7a 70 .|(.f..M.o/$.gzp 00000030 42 ed 55 18 66 86 f6 a1 d1 0c a4 5c 2e 4e fa a2 B.U.f......\.N.. Incoming raw data at 2018-03-23 13:11:02 00000000 89 c2 23 04 2d 07 2d 60 b6 f9 91 03 01 7f b0 88 ..#.-.-`........ 00000010 d6 63 ba fc 8b 2c 24 26 66 45 ac 51 52 af d3 33 .c...,$&fE.QR..3 00000020 af 63 68 f9 bb e0 52 64 ac 04 b3 d3 83 90 7a 27 .ch...Rd......z' 00000030 49 00 57 6f 44 c3 24 8b 9f 9c 03 10 46 3f da 2d I.WoD.$.....F?.- Incoming packet #0x11, type 94 / 0x5e (SSH2_MSG_CHANNEL_DATA) 00000000 00 00 01 00 00 00 00 01 78 ........x Outgoing packet #0xf, type 94 / 0x5e (SSH2_MSG_CHANNEL_DATA) 00000000 00 00 00 00 00 00 00 01 69 ........i Outgoing raw data at 2018-03-23 13:11:03 00000000 6c 72 f8 29 c0 4b fe ed b2 97 56 a5 8a a8 77 1a lr.).K....V...w. 00000010 c9 a8 64 23 85 b3 16 bf 2d e0 97 2f d4 a8 f6 7c ..d#....-../...| 00000020 c4 63 ff 2e a7 1c 80 0f 2d 91 42 7a 95 e5 92 6a .c......-.Bz...j 00000030 ff cb e1 23 3d 9d 5c d7 cc ab 8e 97 26 da d5 53 ...#=.\.....&..S Incoming raw data at 2018-03-23 13:11:03 00000000 c1 57 63 27 18 2d cd 16 f1 b5 de bd 4e 2d c7 2c .Wc'.-......N-., 00000010 59 83 03 33 9d 59 0a e3 91 30 fd ab 27 3a b3 99 Y..3.Y...0..':.. 00000020 c5 08 84 e5 ed b5 59 b1 a4 c9 d2 84 be 33 10 74 ......Y......3.t 00000030 45 87 22 d3 64 49 e8 37 a9 96 fd 3a cf ed d2 2c E.".dI.7...:..., Incoming packet #0x12, type 94 / 0x5e (SSH2_MSG_CHANNEL_DATA) 00000000 00 00 01 00 00 00 00 01 69 ........i Outgoing packet #0x10, type 94 / 0x5e (SSH2_MSG_CHANNEL_DATA) 00000000 00 00 00 00 00 00 00 01 74 ........t Outgoing raw data at 2018-03-23 13:11:04 00000000 66 13 4b 8c eb fc 36 84 50 01 36 cd 70 d1 76 d1 f.K...6.P.6.p.v. 00000010 a9 68 98 df a1 4f bd 66 a5 d5 cc 50 93 01 79 88 .h...O.f...P..y. 00000020 d4 a9 9a 2f 64 27 4e 43 87 0f 06 fb 25 f0 82 7a .../d'NC....%..z 00000030 99 5f a6 42 7e e9 71 56 1e 78 c5 11 52 3a 90 a7 ._.B~.qV.x..R:.. Incoming raw data at 2018-03-23 13:11:04 00000000 10 ac e1 e1 8b 81 fa b3 e8 f4 6a 35 17 52 c4 d1 ..........j5.R.. 00000010 21 0d 69 c1 51 b0 de 74 d1 07 5d 28 03 5c 87 a8 !.i.Q..t..](.\.. 00000020 53 e8 ea 5e 28 72 da 5b 54 27 f4 1f a7 d7 45 96 S..^(r.[T'....E. 00000030 73 fd 7c c1 ec 2b 1e 97 e9 cd 09 bf 9c 5f c8 c8 s.|..+......._.. Incoming packet #0x13, type 94 / 0x5e (SSH2_MSG_CHANNEL_DATA) 00000000 00 00 01 00 00 00 00 01 74 ........t Outgoing packet #0x11, type 94 / 0x5e (SSH2_MSG_CHANNEL_DATA) 00000000 00 00 00 00 00 00 00 01 0d ......... Outgoing raw data at 2018-03-23 13:11:04 00000000 16 a1 75 5c 00 ea 0d 69 83 ac 19 b7 cf 34 c6 1e ..u\...i.....4.. 00000010 03 27 8d a5 ab db af e5 b4 d1 21 ea 1e 93 b2 60 .'........!....` 00000020 cf 38 1e 21 8c ec a6 e5 5a 9d c8 8c 03 78 e8 5a .8.!....Z....x.Z 00000030 ce b3 d4 ca 3d 15 30 26 68 ad 33 b9 8a 42 4f 09 ....=.0&h.3..BO. Incoming raw data at 2018-03-23 13:11:04 00000000 24 3b cd 23 ab 53 93 4b 5e 6b 6f b1 02 86 ae 3d $;.#.S.K^ko....= 00000010 a5 45 f1 99 71 aa 9a 5f 0c f3 f2 6c 99 b8 af 0f .E..q.._...l.... 00000020 81 2f a2 4a 07 75 db 0f c1 b2 7d 50 74 c2 ef ba ./.J.u....}Pt... 00000030 9e 8d 9f de c1 c3 a5 0d 2d 63 fd c8 f0 1a 2f 94 ........-c..../. Incoming packet #0x14, type 94 / 0x5e (SSH2_MSG_CHANNEL_DATA) 00000000 00 00 01 00 00 00 00 02 0d 0a .......... Incoming raw data at 2018-03-23 13:11:04 00000000 32 dc 3a 4f a6 43 dd 93 bf 2c 28 30 75 10 77 d5 2.:O.C...,(0u.w. 00000010 90 a5 92 ce f3 b7 d6 00 53 1a 12 c7 13 e2 f1 07 ........S....... 00000020 09 0a 9e ff 15 3e 5f e9 07 53 d3 a6 fb 24 53 63 .....>_..S...$Sc 00000030 0a 16 64 e3 31 6f d6 dc ee b6 5f 64 3e e8 70 1a ..d.1o...._d>.p. Incoming packet #0x15, type 94 / 0x5e (SSH2_MSG_CHANNEL_DATA) 00000000 00 00 01 00 00 00 00 08 6c 6f 67 6f 75 74 0d 0a ........logout.. Incoming raw data at 2018-03-23 13:11:04 00000000 4d 55 c9 65 c9 23 44 84 5f 2f 27 cf 85 6f 7e 83 MU.e.#D._/'..o~. 00000010 56 e0 bc ef 4c bb fa ff e0 f2 3f 1a 05 b2 67 b1 V...L.....?...g. 00000020 19 04 94 ef 9b 74 a8 56 01 d4 a6 e8 a5 0d 24 eb .....t.V......$. 00000030 2a 9d 30 f3 18 d7 7d 81 65 31 87 42 dc 14 32 0e *.0...}.e1.B..2. 00000040 7f fa 3d 8f dc db 22 93 32 a7 14 94 69 e1 dc 73 ..=...".2...i..s 00000050 1b d5 dd 4b 1a 78 56 38 bb 00 8b 3b 63 d6 e9 67 ...K.xV8...;c..g 00000060 71 84 4e aa 44 cd 17 bf 05 7c d1 63 b1 3d f8 b2 q.N.D....|.c.=.. 00000070 ee fd e3 fc 51 3f 3e 48 b4 c1 e1 d6 bc e0 ac a7 ....Q?>H........ 00000080 2b 5a e9 ee 46 cc 4c 3a 25 f4 ee 2c 18 e1 94 35 +Z..F.L:%..,...5 00000090 77 6e 7e db dd 5c ea e4 68 ce ae 1d fe a9 be 8c wn~..\..h....... 000000a0 0c 1d 97 bb 6d 68 cd a7 c0 1a a3 db 7c c1 db dc ....mh......|... Incoming packet #0x16, type 98 / 0x62 (SSH2_MSG_CHANNEL_REQUEST) 00000000 00 00 01 00 00 00 00 0b 65 78 69 74 2d 73 74 61 ........exit-sta 00000010 74 75 73 00 00 00 00 00 tus..... Event Log: Server sent command exit status 0 Incoming packet #0x17, type 96 / 0x60 (SSH2_MSG_CHANNEL_EOF) 00000000 00 00 01 00 .... Outgoing packet #0x12, type 96 / 0x60 (SSH2_MSG_CHANNEL_EOF) 00000000 00 00 00 00 .... Outgoing raw data at 2018-03-23 13:11:04 00000000 b8 43 1c b4 42 86 d1 c1 da 03 86 18 68 7c e0 2f .C..B.......h|./ 00000010 2c c7 ce 8c b9 f6 0b 64 51 01 7f 02 5e 22 40 ea ,......dQ...^"@. 00000020 e5 8a c2 5d 1a bc cc 80 04 09 68 f3 7a ba f7 2e ...]......h.z... Outgoing packet #0x13, type 97 / 0x61 (SSH2_MSG_CHANNEL_CLOSE) 00000000 00 00 00 00 .... Outgoing raw data at 2018-03-23 13:11:04 00000000 9f cc 55 92 09 a7 e3 f9 b5 53 d1 ff d8 aa 8a 23 ..U......S.....# 00000010 46 c9 85 17 df e9 d4 9f 6b 8b 72 72 0e 80 29 86 F.......k.rr..). 00000020 35 08 0a 1b 69 46 a7 82 fa 66 65 2f 38 b0 ab ef 5...iF...fe/8... Incoming packet #0x18, type 97 / 0x61 (SSH2_MSG_CHANNEL_CLOSE) 00000000 00 00 01 00 .... Event Log: Disconnected: All channels closed
|
|
#7
03-23-2018, 03:05 PM
|
|||
|
|||
|
taksoy007,
After reviewing the logs there appear to be some key differences in the connection parameters that PuTTY and SecureCRT are using. I'd like to see if we can get these to match to help provide a true "apples to apples" comparison. Key Exchange SecureCRT = ecdh-sha2-nistp521 PuTTY = curve25519-sha256 Host Key Algorithm SecureCRT = ssh-rsa PuTTY = ssh-ed25519 Cipher Both appear to be using aes256-ctr although PuTTY reports it as AES-256 SDCTR Mac Both used hmac-sha2-256 SecureCRT does not yet support curve25519-sha256 as a key exchange method, Can you configure PuTTY to use ecdh-sha2-nistp521? Your remote system is reporting many different host keys: ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519By default SecureCRT will prefer ssh-rsa over ssh-ed25519 that PuTTY is using. We can configure SecureCRT to prefer this host key instead. To do so you will need to make some modification to the sessions .ini file. To locate the ini file first navigate to Options > Global Options > Configuration Paths and take note of the Config path. In File Explorer navigate to this location and open the Sessions folder, in this folder you will find the ini file for the session in question. Open the ini file using your favorite text editor. First locate the line: D:"Use Global Host Key Algorithms"=00000001And modify it to: D:"Use Global Host Key Algorithms"=00000000You will also need to modify the line starting with: S:"Host Key Algorithms"=You will want to ensure that ssh-ed25519 is the first option listed: S:"Host Key Algorithms"=ssh-ed25519,ssh-rsa,ecdsa-sha2-nistp256...Save the changes made to the .ini file. After configuring PuTTY to use ecdh-sha2-nistp521 and SecureCRT to use ssh-ed25519 please attempt to connect with both clients again. Does the behavior change? Can you provide a log from both clients with the modified settings? Please paste the log contents into a text file and attach the file instead of pasting the information directly into the forum post.
__________________
Thanks, --Eric VanDyke Software Technical Support support@vandyke.com (505) 332-5730
|
 |
| Tags |
| failed host , host key |
| Thread Tools | |
| Display Modes | |
|
|
Linear Mode
