22:22:17.502558 10.0.0.1.1065 > 10.0.0.4.ssh: S 1857294707:1857294707(0) win 5840 <mss 1460,sackOK,timestamp 1283104 0,nop,wscale 0> (DF)
22:22:17.515841 10.0.0.4.ssh > 10.0.0.1.1065: S 417538213:417538213(0) ack 1857294708 win 5792 <mss 1460,sackOK,timestamp 1128940 1283104,nop,wscale 0> (DF)
22:22:17.516372 10.0.0.1.1065 > 10.0.0.4.ssh: . ack 1 win 5840 <nop,nop,timestamp 1283106 1128940> (DF)
22:22:17.632386 10.0.0.4.ssh > 10.0.0.1.1065: P 1:23(22) ack 1 win 5792 <nop,nop,timestamp 1128951 1283106> (DF)
22:22:17.635156 10.0.0.1.1065 > 10.0.0.4.ssh: . ack 23 win 5840 <nop,nop,timestamp 1283117 1128951> (DF)
22:22:17.638758 10.0.0.1.1065 > 10.0.0.4.ssh: P 1:23(22) ack 23 win 5840 <nop,nop,timestamp 1283118 1128951> (DF)
22:22:17.654430 10.0.0.4.ssh > 10.0.0.1.1065: . ack 23 win 5792 <nop,nop,timestamp 1128953 1283118> (DF)
22:22:17.654870 10.0.0.1.1065 > 10.0.0.4.ssh: P 23:663(640) ack 23 win 5840 <nop,nop,timestamp 1283119 1128953> (DF)
22:22:17.667438 10.0.0.4.ssh > 10.0.0.1.1065: . ack 663 win 7040 <nop,nop,timestamp 1128955 1283119> (DF)
22:22:17.686578 10.0.0.4.ssh > 10.0.0.1.1065: P 23:663(640) ack 663 win 7040 <nop,nop,timestamp 1128956 1283119> (DF)
22:22:17.690846 10.0.0.1.1065 > 10.0.0.4.ssh: P 663:687(24) ack 663 win 7040 <nop,nop,timestamp 1283123 1128956> (DF)
22:22:17.734908 10.0.0.4.ssh > 10.0.0.1.1065: . ack 687 win 7040 <nop,nop,timestamp 1128962 1283123> (DF)
22:22:17.865900 10.0.0.4.ssh > 10.0.0.1.1065: P 663:815(152) ack 687 win 7040 <nop,nop,timestamp 1128974 1283123> (DF)
22:22:17.906021 10.0.0.1.1065 > 10.0.0.4.ssh: . ack 815 win 8320 <nop,nop,timestamp 1283145 1128974> (DF)
22:22:18.081990 10.0.0.1.1065 > 10.0.0.4.ssh: P 687:831(144) ack 815 win 8320 <nop,nop,timestamp 1283162 1128974> (DF)
22:22:18.088442 10.0.0.4.ssh > 10.0.0.1.1065: . ack 831 win 8320 <nop,nop,timestamp 1128997 1283162> (DF)
22:22:18.653378 10.0.0.4.ssh > 10.0.0.1.1065: P 815:1279(464) ack 831 win 8320 <nop,nop,timestamp 1129053 1283162> (DF)
22:22:18.653809 10.0.0.1.1065 > 10.0.0.4.ssh: . ack 1279 win 9600 <nop,nop,timestamp 1283219 1129053> (DF)
22:22:19.903364 10.0.0.1.1065 > 10.0.0.4.ssh: P 831:847(16) ack 1279 win 9600 <nop,nop,timestamp 1283344 1129053> (DF)
22:22:19.906397 10.0.0.4.ssh > 10.0.0.1.1065: R 417539492:417539492(0) win 0 (DF)