..........
beginning of a pretty reproducable scp transfer stall ... it stalls at roughly ~10MB (of a 100+mb file) in this example
server's tcpdump, as it receives my file
..........
12:44:15.890987 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [S], seq 277579361, win 5840, options [mss 1460,sackOK,TS val 3747852 ecr 0,nop,wscale 7], length 0
12:44:15.891133 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [S.], seq 2690113123, ack 277579362, win 5792, options [mss 1460,nop,nop,TS val 282639106 ecr 3747852,nop,wscale 6], length 0
12:44:15.891549 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], ack 1, win 46, options [nop,nop,TS val 3747853 ecr 282639106], length 0
12:44:16.019369 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [P.], seq 1:22, ack 1, win 91, options [nop,nop,TS val 282639138 ecr 3747853], length 21
12:44:16.019910 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], ack 22, win 46, options [nop,nop,TS val 3747891 ecr 282639138], length 0
12:44:16.020129 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [P.], seq 1:22, ack 22, win 46, options [nop,nop,TS val 3747891 ecr 282639138], length 21
12:44:16.020210 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 22, win 91, options [nop,nop,TS val 282639138 ecr 3747891], length 0
12:44:16.020769 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [P.], seq 22:870, ack 22, win 46, options [nop,nop,TS val 3747891 ecr 282639138], length 848
12:44:16.020817 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 870, win 117, options [nop,nop,TS val 282639138 ecr 3747891], length 0
12:44:16.023803 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [P.], seq 22:806, ack 870, win 117, options [nop,nop,TS val 282639139 ecr 3747891], length 784
12:44:16.024687 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [P.], seq 870:894, ack 806, win 58, options [nop,nop,TS val 3747892 ecr 282639139], length 24
12:44:16.030837 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [P.], seq 806:958, ack 894, win 117, options [nop,nop,TS val 282639141 ecr 3747892], length 152
12:44:16.032938 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [P.], seq 894:1038, ack 958, win 71, options [nop,nop,TS val 3747895 ecr 282639141], length 144
12:44:16.045801 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [P.], seq 958:1422, ack 1038, win 144, options [nop,nop,TS val 282639144 ecr 3747895], length 464
12:44:16.048733 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [P.], seq 1038:1054, ack 1422, win 83, options [nop,nop,TS val 3747900 ecr 282639144], length 16
12:44:16.086436 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 1054, win 144, options [nop,nop,TS val 282639155 ecr 3747900], length 0
12:44:16.088704 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [P.], seq 1054:1102, ack 1422, win 83, options [nop,nop,TS val 3747912 ecr 282639155], length 48
12:44:16.088866 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 1102, win 144, options [nop,nop,TS val 282639155 ecr 3747912], length 0
12:44:16.089310 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [P.], seq 1422:1470, ack 1102, win 144, options [nop,nop,TS val 282639155 ecr 3747912], length 48
12:44:16.089794 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [P.], seq 1102:1166, ack 1470, win 83, options [nop,nop,TS val 3747912 ecr 282639155], length 64
12:44:16.126441 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 1166, win 144, options [nop,nop,TS val 282639165 ecr 3747912], length 0
12:44:16.167361 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [P.], seq 1470:1534, ack 1166, win 144, options [nop,nop,TS val 282639175 ecr 3747912], length 64
12:44:16.167957 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [P.], seq 1166:1406, ack 1534, win 83, options [nop,nop,TS val 3747935 ecr 282639175], length 240
12:44:16.168064 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 1406, win 170, options [nop,nop,TS val 282639175 ecr 3747935], length 0
12:44:16.203701 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [P.], seq 1534:1726, ack 1406, win 170, options [nop,nop,TS val 282639184 ecr 3747935], length 192
12:44:16.207631 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [P.], seq 1406:1790, ack 1726, win 95, options [nop,nop,TS val 3747947 ecr 282639184], length 384
12:44:16.210882 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [P.], seq 1726:1758, ack 1790, win 197, options [nop,nop,TS val 282639186 ecr 3747947], length 32
12:44:16.211796 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [P.], seq 1790:1918, ack 1758, win 95, options [nop,nop,TS val 3747949 ecr 282639186], length 128
12:44:16.220981 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [P.], seq 1758:1806, ack 1918, win 223, options [nop,nop,TS val 282639188 ecr 3747949], length 48
12:44:16.224664 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [P.], seq 1918:1982, ack 1806, win 95, options [nop,nop,TS val 3747952 ecr 282639188], length 64
12:44:16.226268 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [P.], seq 1806:1886, ack 1982, win 223, options [nop,nop,TS val 282639189 ecr 3747952], length 80
12:44:16.264938 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], ack 1886, win 95, options [nop,nop,TS val 3747965 ecr 282639189], length 0
12:44:16.286634 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [P.], seq 1886:1934, ack 1982, win 223, options [nop,nop,TS val 282639205 ecr 3747965], length 48
........
over a mb of probably non-interesting logs while transferring over my wifi connection ... about 9mb of data at almost 2MB/sec
........
12:44:24.560517 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9601950:9603398, ack 4766, win 95, options [nop,nop,TS val 3750447 ecr 282640929], length 1448
12:44:24.560555 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 9603398, win 18100, options [nop,nop,TS val 282641273 ecr 3750447], length 0
12:44:24.561219 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9603398:9604846, ack 4766, win 95, options [nop,nop,TS val 3750447 ecr 282640929], length 1448
12:44:24.561535 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9604846:9606294, ack 4766, win 95, options [nop,nop,TS val 3750450 ecr 282640929], length 1448
12:44:24.561577 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 9606294, win 18100, options [nop,nop,TS val 282641273 ecr 3750447], length 0
12:44:24.561849 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9606294:9607742, ack 4766, win 95, options [nop,nop,TS val 3750450 ecr 282640929], length 1448
12:44:24.562164 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9607742:9609190, ack 4766, win 95, options [nop,nop,TS val 3750451 ecr 282640929], length 1448
12:44:24.562206 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 9609190, win 18100, options [nop,nop,TS val 282641273 ecr 3750450], length 0
12:44:24.562928 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9609190:9610638, ack 4766, win 95, options [nop,nop,TS val 3750451 ecr 282640929], length 1448
12:44:24.563239 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9610638:9612086, ack 4766, win 95, options [nop,nop,TS val 3750451 ecr 282640929], length 1448
12:44:24.563293 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 9612086, win 18100, options [nop,nop,TS val 282641274 ecr 3750451], length 0
12:44:24.563550 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9612086:9613534, ack 4766, win 95, options [nop,nop,TS val 3750452 ecr 282640929], length 1448
12:44:24.563863 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9613534:9614982, ack 4766, win 95, options [nop,nop,TS val 3750452 ecr 282640929], length 1448
12:44:24.563901 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 9614982, win 18100, options [nop,nop,TS val 282641274 ecr 3750452], length 0
12:44:24.564176 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9614982:9616430, ack 4766, win 95, options [nop,nop,TS val 3750453 ecr 282640929], length 1448
12:44:24.564489 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9616430:9617878, ack 4766, win 95, options [nop,nop,TS val 3750453 ecr 282640929], length 1448
12:44:24.564541 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 9617878, win 18100, options [nop,nop,TS val 282641274 ecr 3750453], length 0
12:44:24.565507 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9617878:9619326, ack 4766, win 95, options [nop,nop,TS val 3750454 ecr 282640929], length 1448
12:44:24.565804 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9619326:9620774, ack 4766, win 95, options [nop,nop,TS val 3750454 ecr 282640929], length 1448
12:44:24.565861 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 9620774, win 18100, options [nop,nop,TS val 282641274 ecr 3750454], length 0
12:44:24.566118 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9620774:9622222, ack 4766, win 95, options [nop,nop,TS val 3750454 ecr 282640929], length 1448
12:44:24.566430 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9622222:9623670, ack 4766, win 95, options [nop,nop,TS val 3750454 ecr 282640929], length 1448
12:44:24.566472 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 9623670, win 18100, options [nop,nop,TS val 282641274 ecr 3750454], length 0
12:44:24.566744 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9623670:9625118, ack 4766, win 95, options [nop,nop,TS val 3750454 ecr 282640929], length 1448
12:44:24.568754 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9625118:9626566, ack 4766, win 95, options [nop,nop,TS val 3750455 ecr 282640929], length 1448
12:44:24.568879 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 9626566, win 18100, options [nop,nop,TS val 282641275 ecr 3750454], length 0
12:44:24.569033 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9626566:9628014, ack 4766, win 95, options [nop,nop,TS val 3750455 ecr 282640929], length 1448
12:44:24.569341 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9628014:9629462, ack 4766, win 95, options [nop,nop,TS val 3750455 ecr 282640929], length 1448
12:44:24.569379 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 9629462, win 18100, options [nop,nop,TS val 282641275 ecr 3750455], length 0
12:44:24.569656 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9629462:9630910, ack 4766, win 95, options [nop,nop,TS val 3750455 ecr 282640929], length 1448
12:44:24.569969 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9630910:9632358, ack 4766, win 95, options [nop,nop,TS val 3750455 ecr 282640929], length 1448
12:44:24.570018 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 9632358, win 18100, options [nop,nop,TS val 282641275 ecr 3750455], length 0
12:44:24.570282 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9632358:9633806, ack 4766, win 95, options [nop,nop,TS val 3750455 ecr 282640929], length 1448
12:44:24.570594 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9633806:9635254, ack 4766, win 95, options [nop,nop,TS val 3750455 ecr 282640929], length 1448
12:44:24.570636 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 9635254, win 18100, options [nop,nop,TS val 282641275 ecr 3750455], length 0
12:44:24.571066 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9635254:9636702, ack 4766, win 95, options [nop,nop,TS val 3750455 ecr 282640929], length 1448
12:44:24.571373 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9636702:9638150, ack 4766, win 95, options [nop,nop,TS val 3750455 ecr 282640929], length 1448
12:44:24.571404 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 9638150, win 18100, options [nop,nop,TS val 282641276 ecr 3750455], length 0
12:44:24.571688 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9638150:9639598, ack 4766, win 95, options [nop,nop,TS val 3750455 ecr 282640929], length 1448
12:44:24.572003 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9639598:9641046, ack 4766, win 95, options [nop,nop,TS val 3750455 ecr 282640929], length 1448
12:44:24.572043 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 9641046, win 18100, options [nop,nop,TS val 282641276 ecr 3750455], length 0
12:44:24.572315 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9641046:9642494, ack 4766, win 95, options [nop,nop,TS val 3750455 ecr 282640929], length 1448
12:44:24.572628 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9642494:9643942, ack 4766, win 95, options [nop,nop,TS val 3750455 ecr 282640929], length 1448
12:44:24.572677 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 9643942, win 18100, options [nop,nop,TS val 282641276 ecr 3750455], length 0
12:44:24.572940 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9643942:9645390, ack 4766, win 95, options [nop,nop,TS val 3750455 ecr 282640929], length 1448
12:44:24.573290 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9645390:9646838, ack 4766, win 95, options [nop,nop,TS val 3750455 ecr 282640929], length 1448
12:44:24.573330 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 9646838, win 18100, options [nop,nop,TS val 282641276 ecr 3750455], length 0
12:44:24.574345 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9646838:9648286, ack 4766, win 95, options [nop,nop,TS val 3750457 ecr 282640929], length 1448
12:44:24.575093 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9648286:9649734, ack 4766, win 95, options [nop,nop,TS val 3750457 ecr 282640929], length 1448
12:44:24.575177 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 9649734, win 18100, options [nop,nop,TS val 282641277 ecr 3750457], length 0
12:44:24.575400 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9649734:9651182, ack 4766, win 95, options [nop,nop,TS val 3750457 ecr 282640929], length 1448
12:44:24.575713 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9651182:9652630, ack 4766, win 95, options [nop,nop,TS val 3750457 ecr 282640929], length 1448
12:44:24.575753 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 9652630, win 18100, options [nop,nop,TS val 282641277 ecr 3750457], length 0
12:44:24.576028 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9652630:9654078, ack 4766, win 95, options [nop,nop,TS val 3750457 ecr 282640929], length 1448
12:44:24.578472 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9654078:9655526, ack 4766, win 95, options [nop,nop,TS val 3750458 ecr 282640929], length 1448
12:44:24.578596 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 9655526, win 18100, options [nop,nop,TS val 282641277 ecr 3750457], length 0
12:44:24.594191 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9655526:9656974, ack 4766, win 95, options [nop,nop,TS val 3750458 ecr 282640929], length 1448
12:44:24.595633 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9656974:9658422, ack 4766, win 95, options [nop,nop,TS val 3750458 ecr 282640929], length 1448
12:44:24.595750 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 9658422, win 18100, options [nop,nop,TS val 282641282 ecr 3750458], length 0
12:44:24.595929 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9658422:9659870, ack 4766, win 95, options [nop,nop,TS val 3750458 ecr 282640929], length 1448
12:44:24.596242 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9659870:9661318, ack 4766, win 95, options [nop,nop,TS val 3750458 ecr 282640929], length 1448
12:44:24.596285 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 9661318, win 18100, options [nop,nop,TS val 282641282 ecr 3750458], length 0
12:44:24.596556 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9661318:9662766, ack 4766, win 95, options [nop,nop,TS val 3750458 ecr 282640929], length 1448
12:44:24.596868 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9662766:9664214, ack 4766, win 95, options [nop,nop,TS val 3750458 ecr 282640929], length 1448
12:44:24.596910 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 9664214, win 18100, options [nop,nop,TS val 282641282 ecr 3750458], length 0
12:44:24.597185 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [.], seq 9664214:9665662, ack 4766, win 95, options [nop,nop,TS val 3750458 ecr 282640929], length 1448
12:44:24.597422 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [P.], seq 9665662:9666606, ack 4766, win 95, options [nop,nop,TS val 3750458 ecr 282640929], length 944
12:44:24.597459 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [.], ack 9666606, win 18100, options [nop,nop,TS val 282641282 ecr 3750458], length 0
........
the above seems to be the last proper packet, roughly, sortof, maybe?
(what's with the strange seq and ack numbers below?)
........
12:44:38.764663 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [P.], seq 9666606:9666670, ack 4766, win 95, options [nop,nop,TS val 3754713 ecr 282640929], length 64
12:44:38.764698 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [F.], seq 9666670, ack 4766, win 95, options [nop,nop,TS val 3754713 ecr 282640929], length 0
12:44:38.795651 IP 10.0.0.1.ssh > 10.0.0.4.51612: Flags [F.], seq 5054, ack 9666671, win 18100, options [nop,nop,TS val 282644831 ecr 3754713], length 0
12:44:38.796254 IP 10.0.0.4.51612 > 10.0.0.1.ssh: Flags [R], seq 287246032, win 0, length 0
12:44:43.374206 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [S], seq 716995574, win 5840, options [mss 1460,sackOK,TS val 3756096 ecr 0,nop,wscale 7], length 0
12:44:43.374308 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [S.], seq 3113712691, ack 716995575, win 5792, options [mss 1460,nop,nop,TS val 282645976 ecr 3756096,nop,wscale 6], length 0
12:44:43.374677 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 1, win 46, options [nop,nop,TS val 3756096 ecr 282645976], length 0
12:44:43.388259 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 1:22, ack 1, win 91, options [nop,nop,TS val 282645979 ecr 3756096], length 21
12:44:43.388721 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 22, win 46, options [nop,nop,TS val 3756101 ecr 282645979], length 0
12:44:43.388879 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 1:22, ack 22, win 46, options [nop,nop,TS val 3756101 ecr 282645979], length 21
12:44:43.388954 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [.], ack 22, win 91, options [nop,nop,TS val 282645980 ecr 3756101], length 0
12:44:43.389457 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 22:870, ack 22, win 46, options [nop,nop,TS val 3756101 ecr 282645980], length 848
12:44:43.389507 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [.], ack 870, win 117, options [nop,nop,TS val 282645980 ecr 3756101], length 0
12:44:43.394320 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 22:806, ack 870, win 117, options [nop,nop,TS val 282645981 ecr 3756101], length 784
12:44:43.398473 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 870:894, ack 806, win 58, options [nop,nop,TS val 3756104 ecr 282645981], length 24
12:44:43.403791 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 806:958, ack 894, win 117, options [nop,nop,TS val 282645983 ecr 3756104], length 152
12:44:43.405918 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 894:1038, ack 958, win 71, options [nop,nop,TS val 3756106 ecr 282645983], length 144
12:44:43.423313 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 958:1422, ack 1038, win 144, options [nop,nop,TS val 282645988 ecr 3756106], length 464
12:44:43.428142 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 1038:1054, ack 1422, win 83, options [nop,nop,TS val 3756113 ecr 282645988], length 16
12:44:43.464667 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [.], ack 1054, win 144, options [nop,nop,TS val 282645999 ecr 3756113], length 0
12:44:43.465129 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 1054:1102, ack 1422, win 83, options [nop,nop,TS val 3756124 ecr 282645999], length 48
12:44:43.465227 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [.], ack 1102, win 144, options [nop,nop,TS val 282645999 ecr 3756124], length 0
12:44:43.465540 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 1422:1470, ack 1102, win 144, options [nop,nop,TS val 282645999 ecr 3756124], length 48
12:44:43.466010 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 1102:1166, ack 1470, win 83, options [nop,nop,TS val 3756124 ecr 282645999], length 64
12:44:43.504685 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [.], ack 1166, win 144, options [nop,nop,TS val 282646009 ecr 3756124], length 0
12:44:43.541574 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 1470:1534, ack 1166, win 144, options [nop,nop,TS val 282646018 ecr 3756124], length 64
12:44:43.542134 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 1166:1406, ack 1534, win 83, options [nop,nop,TS val 3756147 ecr 282646018], length 240
12:44:43.542243 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [.], ack 1406, win 170, options [nop,nop,TS val 282646018 ecr 3756147], length 0
12:44:43.551666 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 1534:1598, ack 1406, win 170, options [nop,nop,TS val 282646020 ecr 3756147], length 64
12:44:43.552201 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 1406:1502, ack 1598, win 83, options [nop,nop,TS val 3756150 ecr 282646020], length 96
12:44:43.556925 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 1598:1662, ack 1502, win 170, options [nop,nop,TS val 282646022 ecr 3756150], length 64
12:44:43.594817 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 1662, win 83, options [nop,nop,TS val 3756163 ecr 282646022], length 0
12:44:44.418408 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 1502:1582, ack 1662, win 83, options [nop,nop,TS val 3756410 ecr 282646022], length 80
12:44:44.421643 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 1662:1710, ack 1582, win 170, options [nop,nop,TS val 282646238 ecr 3756410], length 48
12:44:44.422217 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 1710, win 83, options [nop,nop,TS val 3756411 ecr 282646238], length 0
12:44:44.422330 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 1582:1662, ack 1710, win 83, options [nop,nop,TS val 3756411 ecr 282646238], length 80
12:44:44.423984 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 1710:1742, ack 1662, win 170, options [nop,nop,TS val 282646238 ecr 3756411], length 32
12:44:44.424692 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 1662:1790, ack 1742, win 83, options [nop,nop,TS val 3756411 ecr 282646238], length 128
12:44:44.428332 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 1742:1790, ack 1790, win 197, options [nop,nop,TS val 282646239 ecr 3756411], length 48
12:44:44.428974 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 1790:2174, ack 1790, win 83, options [nop,nop,TS val 3756413 ecr 282646239], length 384
12:44:44.430898 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 1790:1902, ack 2174, win 223, options [nop,nop,TS val 282646240 ecr 3756413], length 112
12:44:44.436995 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 1902:2014, ack 2174, win 223, options [nop,nop,TS val 282646242 ecr 3756413], length 112
12:44:44.437425 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 2014, win 83, options [nop,nop,TS val 3756415 ecr 282646240], length 0
12:44:44.505125 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 2014:2110, ack 2174, win 223, options [nop,nop,TS val 282646259 ecr 3756415], length 96
12:44:44.544917 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 2110, win 83, options [nop,nop,TS val 3756448 ecr 282646259], length 0
12:44:44.918398 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 2174:2222, ack 2110, win 83, options [nop,nop,TS val 3756560 ecr 282646259], length 48
12:44:44.925019 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 2110:2158, ack 2222, win 223, options [nop,nop,TS val 282646364 ecr 3756560], length 48
12:44:44.925497 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 2158, win 83, options [nop,nop,TS val 3756562 ecr 282646364], length 0
12:44:45.018338 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 2222:2270, ack 2158, win 83, options [nop,nop,TS val 3756590 ecr 282646364], length 48
12:44:45.025013 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 2158:2206, ack 2270, win 223, options [nop,nop,TS val 282646389 ecr 3756590], length 48
12:44:45.025516 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 2206, win 83, options [nop,nop,TS val 3756592 ecr 282646389], length 0
12:44:45.095046 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 2270:2318, ack 2206, win 83, options [nop,nop,TS val 3756613 ecr 282646389], length 48
12:44:45.101260 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 2206:2254, ack 2318, win 223, options [nop,nop,TS val 282646408 ecr 3756613], length 48
12:44:45.101747 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 2254, win 83, options [nop,nop,TS val 3756615 ecr 282646408], length 0
12:44:45.175017 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 2318:2366, ack 2254, win 83, options [nop,nop,TS val 3756637 ecr 282646408], length 48
12:44:45.181237 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 2254:2302, ack 2366, win 223, options [nop,nop,TS val 282646428 ecr 3756637], length 48
12:44:45.181729 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 2302, win 83, options [nop,nop,TS val 3756639 ecr 282646428], length 0
12:44:45.258425 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 2366:2414, ack 2302, win 83, options [nop,nop,TS val 3756662 ecr 282646428], length 48
12:44:45.264990 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 2302:2350, ack 2414, win 223, options [nop,nop,TS val 282646449 ecr 3756662], length 48
12:44:45.265518 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 2350, win 83, options [nop,nop,TS val 3756664 ecr 282646449], length 0
12:44:45.318937 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 2414:2462, ack 2350, win 83, options [nop,nop,TS val 3756680 ecr 282646449], length 48
12:44:45.325021 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 2350:2398, ack 2462, win 223, options [nop,nop,TS val 282646464 ecr 3756680], length 48
12:44:45.325565 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 2398, win 83, options [nop,nop,TS val 3756682 ecr 282646464], length 0
12:44:45.388381 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 2462:2510, ack 2398, win 83, options [nop,nop,TS val 3756701 ecr 282646464], length 48
12:44:45.397027 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 2398:2446, ack 2510, win 223, options [nop,nop,TS val 282646482 ecr 3756701], length 48
12:44:45.397532 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 2446, win 83, options [nop,nop,TS val 3756703 ecr 282646482], length 0
12:44:45.465085 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 2510:2558, ack 2446, win 83, options [nop,nop,TS val 3756724 ecr 282646482], length 48
12:44:45.473148 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 2446:2494, ack 2558, win 223, options [nop,nop,TS val 282646501 ecr 3756724], length 48
12:44:45.473682 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 2494, win 83, options [nop,nop,TS val 3756726 ecr 282646501], length 0
12:44:45.548368 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 2558:2606, ack 2494, win 83, options [nop,nop,TS val 3756749 ecr 282646501], length 48
12:44:45.557007 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 2494:2542, ack 2606, win 223, options [nop,nop,TS val 282646522 ecr 3756749], length 48
12:44:45.557493 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 2542, win 83, options [nop,nop,TS val 3756751 ecr 282646522], length 0
12:44:45.731759 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 2606:2654, ack 2542, win 83, options [nop,nop,TS val 3756804 ecr 282646522], length 48
12:44:45.737045 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 2542:2590, ack 2654, win 223, options [nop,nop,TS val 282646567 ecr 3756804], length 48
12:44:45.737545 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 2590, win 83, options [nop,nop,TS val 3756805 ecr 282646567], length 0
12:44:45.951833 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 2654:2702, ack 2590, win 83, options [nop,nop,TS val 3756870 ecr 282646567], length 48
12:44:45.956984 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 2590:2638, ack 2702, win 223, options [nop,nop,TS val 282646622 ecr 3756870], length 48
12:44:45.957444 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 2638, win 83, options [nop,nop,TS val 3756871 ecr 282646622], length 0
12:44:46.021767 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 2702:2750, ack 2638, win 83, options [nop,nop,TS val 3756891 ecr 282646622], length 48
12:44:46.028987 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 2638:2686, ack 2750, win 223, options [nop,nop,TS val 282646640 ecr 3756891], length 48
12:44:46.029421 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 2686, win 83, options [nop,nop,TS val 3756893 ecr 282646640], length 0
12:44:46.058477 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 2750:2798, ack 2686, win 83, options [nop,nop,TS val 3756902 ecr 282646640], length 48
12:44:46.065101 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 2686:2734, ack 2798, win 223, options [nop,nop,TS val 282646649 ecr 3756902], length 48
12:44:46.105083 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 2734, win 83, options [nop,nop,TS val 3756916 ecr 282646649], length 0
12:44:46.525258 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 2798:2846, ack 2734, win 83, options [nop,nop,TS val 3757042 ecr 282646649], length 48
12:44:46.533115 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 2734:2782, ack 2846, win 223, options [nop,nop,TS val 282646766 ecr 3757042], length 48
12:44:46.533583 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 2782, win 83, options [nop,nop,TS val 3757044 ecr 282646766], length 0
12:44:46.588539 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 2846:2894, ack 2782, win 83, options [nop,nop,TS val 3757061 ecr 282646766], length 48
12:44:46.597248 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 2782:2830, ack 2894, win 223, options [nop,nop,TS val 282646782 ecr 3757061], length 48
12:44:46.597708 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 2830, win 83, options [nop,nop,TS val 3757063 ecr 282646782], length 0
12:44:46.638558 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 2894:2942, ack 2830, win 83, options [nop,nop,TS val 3757076 ecr 282646782], length 48
12:44:46.645415 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 2830:2878, ack 2942, win 223, options [nop,nop,TS val 282646794 ecr 3757076], length 48
12:44:46.646126 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 2878, win 83, options [nop,nop,TS val 3757078 ecr 282646794], length 0
12:44:46.878648 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 2942:2990, ack 2878, win 83, options [nop,nop,TS val 3757148 ecr 282646794], length 48
12:44:46.885405 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 2878:2926, ack 2990, win 223, options [nop,nop,TS val 282646854 ecr 3757148], length 48
12:44:46.885875 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 2926, win 83, options [nop,nop,TS val 3757150 ecr 282646854], length 0
12:44:46.935256 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 2990:3038, ack 2926, win 83, options [nop,nop,TS val 3757165 ecr 282646854], length 48
12:44:46.941147 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 2926:2974, ack 3038, win 223, options [nop,nop,TS val 282646868 ecr 3757165], length 48
12:44:46.941619 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 2974, win 83, options [nop,nop,TS val 3757166 ecr 282646868], length 0
12:44:46.958557 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 3038:3086, ack 2974, win 83, options [nop,nop,TS val 3757172 ecr 282646868], length 48
12:44:46.965420 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 2974:3022, ack 3086, win 223, options [nop,nop,TS val 282646874 ecr 3757172], length 48
12:44:47.005165 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 3022, win 83, options [nop,nop,TS val 3757186 ecr 282646874], length 0
12:44:47.268690 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 3086:3134, ack 3022, win 83, options [nop,nop,TS val 3757265 ecr 282646874], length 48
12:44:47.277182 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 3022:3070, ack 3134, win 223, options [nop,nop,TS val 282646952 ecr 3757265], length 48
12:44:47.277639 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 3070, win 83, options [nop,nop,TS val 3757267 ecr 282646952], length 0
12:44:47.348643 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 3134:3182, ack 3070, win 83, options [nop,nop,TS val 3757289 ecr 282646952], length 48
12:44:47.357300 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 3070:3118, ack 3182, win 223, options [nop,nop,TS val 282646972 ecr 3757289], length 48
12:44:47.357763 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 3118, win 83, options [nop,nop,TS val 3757291 ecr 282646972], length 0
12:44:47.438664 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 3182:3230, ack 3118, win 83, options [nop,nop,TS val 3757316 ecr 282646972], length 48
12:44:47.445459 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 3118:3166, ack 3230, win 223, options [nop,nop,TS val 282646994 ecr 3757316], length 48
12:44:47.445932 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 3166, win 83, options [nop,nop,TS val 3757318 ecr 282646994], length 0
12:44:47.558602 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 3230:3278, ack 3166, win 83, options [nop,nop,TS val 3757352 ecr 282646994], length 48
12:44:47.565328 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 3166:3214, ack 3278, win 223, options [nop,nop,TS val 282647024 ecr 3757352], length 48
12:44:47.565803 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 3214, win 83, options [nop,nop,TS val 3757354 ecr 282647024], length 0
12:44:47.569144 IP 10.0.0.1.ssh > 10.0.0.4.51613: Flags [P.], seq 3214:3262, ack 3278, win 223, options [nop,nop,TS val 282647025 ecr 3757354], length 48
12:44:47.572257 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [.], ack 3262, win 83, options [nop,nop,TS val 3757356 ecr 282647025], length 0
12:44:48.298836 IP 10.0.0.4.51613 > 10.0.0.1.ssh: Flags [P.], seq 3278:3326, ack 3262, win 83, options [nop,nop,TS val 3757574 ecr 282647025], length 48