22:24:42.299456 10.0.0.1.1066 > 10.0.0.4.ssh: S 2023226599:2023226599(0) win 5840 <mss 1460,sackOK,timestamp 1297584 0,nop,wscale 0> (DF)
22:24:42.312128 10.0.0.4.ssh > 10.0.0.1.1066: S 557824204:557824204(0) ack 2023226600 win 5792 <mss 1460,sackOK,timestamp 1143419 1297584,nop,wscale 0> (DF)
22:24:42.312681 10.0.0.1.1066 > 10.0.0.4.ssh: . ack 1 win 5840 <nop,nop,timestamp 1297585 1143419> (DF)
22:24:42.422017 10.0.0.4.ssh > 10.0.0.1.1066: P 1:23(22) ack 1 win 5792 <nop,nop,timestamp 1143430 1297585> (DF)
22:24:42.424735 10.0.0.1.1066 > 10.0.0.4.ssh: . ack 23 win 5840 <nop,nop,timestamp 1297596 1143430> (DF)
22:24:42.428346 10.0.0.1.1066 > 10.0.0.4.ssh: P 1:23(22) ack 23 win 5840 <nop,nop,timestamp 1297597 1143430> (DF)
22:24:42.435880 10.0.0.4.ssh > 10.0.0.1.1066: . ack 23 win 5792 <nop,nop,timestamp 1143432 1297597> (DF)
22:24:42.439902 10.0.0.1.1066 > 10.0.0.4.ssh: P 23:663(640) ack 23 win 5840 <nop,nop,timestamp 1297598 1143432> (DF)
22:24:42.456484 10.0.0.4.ssh > 10.0.0.1.1066: P 23:663(640) ack 23 win 5792 <nop,nop,timestamp 1143433 1297597> (DF)
22:24:42.483910 10.0.0.4.ssh > 10.0.0.1.1066: . ack 663 win 7040 <nop,nop,timestamp 1143437 1297598> (DF)
22:24:42.484386 10.0.0.1.1066 > 10.0.0.4.ssh: P 663:687(24) ack 663 win 7040 <nop,nop,timestamp 1297602 1143433> (DF)
22:24:42.504302 10.0.0.4.ssh > 10.0.0.1.1066: . ack 687 win 7040 <nop,nop,timestamp 1143439 1297602> (DF)
22:24:42.597713 10.0.0.4.ssh > 10.0.0.1.1066: P 663:815(152) ack 687 win 7040 <nop,nop,timestamp 1143448 1297602> (DF)
22:24:42.636082 10.0.0.1.1066 > 10.0.0.4.ssh: . ack 815 win 8320 <nop,nop,timestamp 1297618 1143448> (DF)
22:24:42.817259 10.0.0.1.1066 > 10.0.0.4.ssh: P 687:831(144) ack 815 win 8320 <nop,nop,timestamp 1297636 1143448> (DF)
22:24:42.831236 10.0.0.4.ssh > 10.0.0.1.1066: . ack 831 win 8320 <nop,nop,timestamp 1143471 1297636> (DF)
22:24:43.404306 10.0.0.4.ssh > 10.0.0.1.1066: P 815:1279(464) ack 831 win 8320 <nop,nop,timestamp 1143528 1297636> (DF)
22:24:43.404736 10.0.0.1.1066 > 10.0.0.4.ssh: . ack 1279 win 9600 <nop,nop,timestamp 1297694 1143528> (DF)
22:24:43.677489 10.0.0.1.1066 > 10.0.0.4.ssh: P 831:847(16) ack 1279 win 9600 <nop,nop,timestamp 1297722 1143528> (DF)
22:24:43.684272 10.0.0.4.ssh > 10.0.0.1.1066: . ack 847 win 8320 <nop,nop,timestamp 1143557 1297722> (DF)
22:24:43.684700 10.0.0.1.1066 > 10.0.0.4.ssh: P 847:895(48) ack 1279 win 9600 <nop,nop,timestamp 1297722 1143557> (DF)
22:24:43.691497 10.0.0.4.ssh > 10.0.0.1.1066: . ack 895 win 8320 <nop,nop,timestamp 1143557 1297722> (DF)
22:24:43.694011 10.0.0.4.ssh > 10.0.0.1.1066: P 1279:1327(48) ack 895 win 8320 <nop,nop,timestamp 1143557 1297722> (DF)
22:24:43.694407 10.0.0.1.1066 > 10.0.0.4.ssh: . ack 1327 win 9600 <nop,nop,timestamp 1297723 1143557> (DF)
22:24:43.698915 10.0.0.1.1066 > 10.0.0.4.ssh: P 895:959(64) ack 1327 win 9600 <nop,nop,timestamp 1297724 1143557> (DF)
22:24:43.711905 10.0.0.4.ssh > 10.0.0.1.1066: P 1327:1407(80) ack 959 win 8320 <nop,nop,timestamp 1143559 1297724> (DF)
22:24:43.716004 10.0.0.1.1066 > 10.0.0.4.ssh: P 959:1055(96) ack 1407 win 9600 <nop,nop,timestamp 1297725 1143559> (DF)
22:24:43.724168 10.0.0.4.ssh > 10.0.0.1.1066: P 1407:1487(80) ack 1055 win 8320 <nop,nop,timestamp 1143560 1297725> (DF)
22:24:43.756038 10.0.0.1.1066 > 10.0.0.4.ssh: . ack 1487 win 9600 <nop,nop,timestamp 1297730 1143560> (DF)
22:24:44.305425 10.0.0.4.ssh > 10.0.0.1.1065: F 417539492:417539492(0) ack 1857295538 win 8320 <nop,nop,timestamp 1143619 1283219> (DF)
22:24:44.305947 10.0.0.1.1065 > 10.0.0.4.ssh: R 1857295538:1857295538(0) win 0 (DF)
22:24:45.281252 10.0.0.1.1066 > 10.0.0.4.ssh: P 1055:1199(144) ack 1487 win 9600 <nop,nop,timestamp 1297882 1143560> (DF)
22:24:45.288516 10.0.0.4.ssh > 10.0.0.1.1066: R 557825691:557825691(0) win 0 (DF)
22:24:46.967463 10.0.0.1.1067 > 10.0.0.4.ssh: S 2035337387:2035337387(0) win 5840 <mss 1460,sackOK,timestamp 1298051 0,nop,wscale 0> (DF)
22:24:46.970694 10.0.0.4.ssh > 10.0.0.1.1067: S 563486152:563486152(0) ack 2035337388 win 5792 <mss 1460,sackOK,timestamp 1143885 1298051,nop,wscale 0> (DF)
22:24:46.971159 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 1 win 5840 <nop,nop,timestamp 1298051 1143885> (DF)
22:24:47.080386 10.0.0.4.ssh > 10.0.0.1.1067: P 1:23(22) ack 1 win 5792 <nop,nop,timestamp 1143896 1298051> (DF)
22:24:47.083160 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 23 win 5840 <nop,nop,timestamp 1298062 1143896> (DF)
22:24:47.122921 10.0.0.1.1067 > 10.0.0.4.ssh: P 1:23(22) ack 23 win 5840 <nop,nop,timestamp 1298066 1143896> (DF)
22:24:47.146400 10.0.0.4.ssh > 10.0.0.1.1067: . ack 23 win 5792 <nop,nop,timestamp 1143903 1298066> (DF)
22:24:47.146905 10.0.0.1.1067 > 10.0.0.4.ssh: P 23:663(640) ack 23 win 5840 <nop,nop,timestamp 1298069 1143903> (DF)
22:24:47.153126 10.0.0.4.ssh > 10.0.0.1.1067: . ack 663 win 7040 <nop,nop,timestamp 1143904 1298069> (DF)
22:24:47.166125 10.0.0.4.ssh > 10.0.0.1.1067: P 23:663(640) ack 663 win 7040 <nop,nop,timestamp 1143905 1298069> (DF)
22:24:47.166510 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 663 win 7040 <nop,nop,timestamp 1298071 1143905> (DF)
22:24:47.172132 10.0.0.1.1067 > 10.0.0.4.ssh: P 663:687(24) ack 663 win 7040 <nop,nop,timestamp 1298071 1143905> (DF)
22:24:47.212453 10.0.0.4.ssh > 10.0.0.1.1067: . ack 687 win 7040 <nop,nop,timestamp 1143910 1298071> (DF)
22:24:47.274084 10.0.0.4.ssh > 10.0.0.1.1067: P 663:815(152) ack 687 win 7040 <nop,nop,timestamp 1143916 1298071> (DF)
22:24:47.306025 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 815 win 8320 <nop,nop,timestamp 1298085 1143916> (DF)
22:24:47.507634 10.0.0.1.1067 > 10.0.0.4.ssh: P 687:831(144) ack 815 win 8320 <nop,nop,timestamp 1298105 1143916> (DF)
22:24:47.511261 10.0.0.4.ssh > 10.0.0.1.1067: . ack 831 win 8320 <nop,nop,timestamp 1143939 1298105> (DF)
22:24:48.083461 10.0.0.4.ssh > 10.0.0.1.1067: P 815:1279(464) ack 831 win 8320 <nop,nop,timestamp 1143996 1298105> (DF)
22:24:48.083929 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 1279 win 9600 <nop,nop,timestamp 1298162 1143996> (DF)
22:24:48.380713 10.0.0.1.1067 > 10.0.0.4.ssh: P 831:847(16) ack 1279 win 9600 <nop,nop,timestamp 1298192 1143996> (DF)
22:24:48.385143 10.0.0.4.ssh > 10.0.0.1.1067: . ack 847 win 8320 <nop,nop,timestamp 1144027 1298192> (DF)
22:24:48.385559 10.0.0.1.1067 > 10.0.0.4.ssh: P 847:895(48) ack 1279 win 9600 <nop,nop,timestamp 1298192 1144027> (DF)
22:24:48.596110 10.0.0.1.1067 > 10.0.0.4.ssh: P 847:895(48) ack 1279 win 9600 <nop,nop,timestamp 1298214 1144027> (DF)
22:24:48.600466 10.0.0.4.ssh > 10.0.0.1.1067: . ack 895 win 8320 <nop,nop,timestamp 1144048 1298214> (DF)
22:24:48.602666 10.0.0.4.ssh > 10.0.0.1.1067: P 1279:1327(48) ack 895 win 8320 <nop,nop,timestamp 1144048 1298214> (DF)
22:24:48.603054 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 1327 win 9600 <nop,nop,timestamp 1298214 1144048> (DF)
22:24:48.608435 10.0.0.1.1067 > 10.0.0.4.ssh: P 895:959(64) ack 1327 win 9600 <nop,nop,timestamp 1298215 1144048> (DF)
22:24:48.618019 10.0.0.4.ssh > 10.0.0.1.1067: P 1327:1407(80) ack 959 win 8320 <nop,nop,timestamp 1144050 1298215> (DF)
22:24:48.622023 10.0.0.1.1067 > 10.0.0.4.ssh: P 959:1055(96) ack 1407 win 9600 <nop,nop,timestamp 1298216 1144050> (DF)
22:24:48.632187 10.0.0.4.ssh > 10.0.0.1.1067: P 1407:1487(80) ack 1055 win 8320 <nop,nop,timestamp 1144051 1298216> (DF)
22:24:48.666031 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 1487 win 9600 <nop,nop,timestamp 1298221 1144051> (DF)
22:24:50.073567 10.0.0.1.1067 > 10.0.0.4.ssh: P 1055:1199(144) ack 1487 win 9600 <nop,nop,timestamp 1298361 1144051> (DF)
22:24:50.103447 10.0.0.4.ssh > 10.0.0.1.1067: P 1487:1519(32) ack 1199 win 9600 <nop,nop,timestamp 1144199 1298361> (DF)
22:24:50.103965 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 1519 win 9600 <nop,nop,timestamp 1298364 1144199> (DF)
22:24:50.108155 10.0.0.1.1067 > 10.0.0.4.ssh: P 1199:1263(64) ack 1519 win 9600 <nop,nop,timestamp 1298365 1144199> (DF)
22:24:50.115904 10.0.0.4.ssh > 10.0.0.1.1067: P 1519:1567(48) ack 1263 win 9600 <nop,nop,timestamp 1144200 1298365> (DF)
22:24:50.120176 10.0.0.1.1067 > 10.0.0.4.ssh: P 1263:1647(384) ack 1567 win 9600 <nop,nop,timestamp 1298366 1144200> (DF) [tos 0x10] 
22:24:50.143621 10.0.0.4.ssh > 10.0.0.1.1067: P 1567:1615(48) ack 1647 win 10880 <nop,nop,timestamp 1144203 1298366> (DF) [tos 0x10] 
22:24:50.175989 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 1615 win 9600 <nop,nop,timestamp 1298372 1144203> (DF) [tos 0x10] 
22:24:50.195913 10.0.0.4.ssh > 10.0.0.1.1067: P 1615:2047(432) ack 1647 win 10880 <nop,nop,timestamp 1144207 1298372> (DF) [tos 0x10] 
22:24:50.196382 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 2047 win 10880 <nop,nop,timestamp 1298374 1144207> (DF) [tos 0x10] 
22:24:50.369342 10.0.0.4.ssh > 10.0.0.1.1067: P 2047:2095(48) ack 1647 win 10880 <nop,nop,timestamp 1144225 1298374> (DF) [tos 0x10] 
22:24:50.369761 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 2095 win 10880 <nop,nop,timestamp 1298391 1144225> (DF) [tos 0x10] 
22:24:50.693021 10.0.0.1.1067 > 10.0.0.4.ssh: P 1647:1695(48) ack 2095 win 10880 <nop,nop,timestamp 1298423 1144225> (DF) [tos 0x10] 
22:24:50.705906 10.0.0.4.ssh > 10.0.0.1.1067: P 2095:2143(48) ack 1695 win 10880 <nop,nop,timestamp 1144258 1298423> (DF) [tos 0x10] 
22:24:50.706364 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 2143 win 10880 <nop,nop,timestamp 1298425 1144258> (DF) [tos 0x10] 
22:24:50.757257 10.0.0.1.1067 > 10.0.0.4.ssh: P 1695:1743(48) ack 2143 win 10880 <nop,nop,timestamp 1298430 1144258> (DF) [tos 0x10] 
22:24:50.765847 10.0.0.4.ssh > 10.0.0.1.1067: P 2143:2191(48) ack 1743 win 10880 <nop,nop,timestamp 1144265 1298430> (DF) [tos 0x10] 
22:24:50.766271 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 2191 win 10880 <nop,nop,timestamp 1298431 1144265> (DF) [tos 0x10] 
22:24:50.888371 10.0.0.1.1067 > 10.0.0.4.ssh: P 1743:1791(48) ack 2191 win 10880 <nop,nop,timestamp 1298443 1144265> (DF) [tos 0x10] 
22:24:50.895250 10.0.0.4.ssh > 10.0.0.1.1067: P 2191:2239(48) ack 1791 win 10880 <nop,nop,timestamp 1144278 1298443> (DF) [tos 0x10] 
22:24:50.895678 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 2239 win 10880 <nop,nop,timestamp 1298443 1144278> (DF) [tos 0x10] 
22:24:51.003447 10.0.0.4.ssh > 10.0.0.1.1067: P 2239:2287(48) ack 1791 win 10880 <nop,nop,timestamp 1144289 1298443> (DF) [tos 0x10] 
22:24:51.003809 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 2287 win 10880 <nop,nop,timestamp 1298454 1144289> (DF) [tos 0x10] 
22:24:51.008934 10.0.0.4.ssh > 10.0.0.1.1067: P 2287:2335(48) ack 1791 win 10880 <nop,nop,timestamp 1144289 1298443> (DF) [tos 0x10] 
22:24:51.009311 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 2335 win 10880 <nop,nop,timestamp 1298455 1144289> (DF) [tos 0x10] 
22:24:51.378696 10.0.0.1.1067 > 10.0.0.4.ssh: P 1791:1839(48) ack 2335 win 10880 <nop,nop,timestamp 1298492 1144289> (DF) [tos 0x10] 
22:24:51.384342 10.0.0.4.ssh > 10.0.0.1.1067: P 2335:2383(48) ack 1839 win 10880 <nop,nop,timestamp 1144327 1298492> (DF) [tos 0x10] 
22:24:51.384771 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 2383 win 10880 <nop,nop,timestamp 1298492 1144327> (DF) [tos 0x10] 
22:24:51.393737 10.0.0.1.1067 > 10.0.0.4.ssh: P 1839:1887(48) ack 2383 win 10880 <nop,nop,timestamp 1298493 1144327> (DF) [tos 0x10] 
22:24:51.402492 10.0.0.4.ssh > 10.0.0.1.1067: P 2383:2431(48) ack 1887 win 10880 <nop,nop,timestamp 1144328 1298493> (DF) [tos 0x10] 
22:24:51.410056 10.0.0.1.1067 > 10.0.0.4.ssh: P 1887:1935(48) ack 2431 win 10880 <nop,nop,timestamp 1298495 1144328> (DF) [tos 0x10] 
22:24:51.415386 10.0.0.4.ssh > 10.0.0.1.1067: P 2431:2479(48) ack 1935 win 10880 <nop,nop,timestamp 1144330 1298495> (DF) [tos 0x10] 
22:24:51.433925 10.0.0.1.1067 > 10.0.0.4.ssh: P 1935:1983(48) ack 2479 win 10880 <nop,nop,timestamp 1298497 1144330> (DF) [tos 0x10] 
22:24:51.445946 10.0.0.4.ssh > 10.0.0.1.1067: P 2479:2527(48) ack 1983 win 10880 <nop,nop,timestamp 1144332 1298497> (DF) [tos 0x10] 
22:24:51.474837 10.0.0.1.1067 > 10.0.0.4.ssh: P 1983:2031(48) ack 2527 win 10880 <nop,nop,timestamp 1298501 1144332> (DF) [tos 0x10] 
22:24:51.496149 10.0.0.4.ssh > 10.0.0.1.1067: P 2527:2575(48) ack 2031 win 10880 <nop,nop,timestamp 1144338 1298501> (DF) [tos 0x10] 
22:24:51.536017 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 2575 win 10880 <nop,nop,timestamp 1298508 1144338> (DF) [tos 0x10] 
22:24:51.574940 10.0.0.1.1067 > 10.0.0.4.ssh: P 2031:2079(48) ack 2575 win 10880 <nop,nop,timestamp 1298511 1144338> (DF) [tos 0x10] 
22:24:51.581627 10.0.0.4.ssh > 10.0.0.1.1067: P 2575:2623(48) ack 2079 win 10880 <nop,nop,timestamp 1144346 1298511> (DF) [tos 0x10] 
22:24:51.582055 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 2623 win 10880 <nop,nop,timestamp 1298512 1144346> (DF) [tos 0x10] 
22:24:51.728061 10.0.0.1.1067 > 10.0.0.4.ssh: P 2079:2127(48) ack 2623 win 10880 <nop,nop,timestamp 1298527 1144346> (DF) [tos 0x10] 
22:24:51.739187 10.0.0.4.ssh > 10.0.0.1.1067: P 2623:2671(48) ack 2127 win 10880 <nop,nop,timestamp 1144362 1298527> (DF) [tos 0x10] 
22:24:51.739861 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 2671 win 10880 <nop,nop,timestamp 1298528 1144362> (DF) [tos 0x10] 
22:24:51.765390 10.0.0.4.ssh > 10.0.0.1.1067: P 2671:2751(80) ack 2127 win 10880 <nop,nop,timestamp 1144365 1298528> (DF) [tos 0x10] 
22:24:51.766065 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 2751 win 10880 <nop,nop,timestamp 1298531 1144365> (DF) [tos 0x10] 
22:24:51.773893 10.0.0.4.ssh > 10.0.0.1.1067: P 2751:2799(48) ack 2127 win 10880 <nop,nop,timestamp 1144366 1298531> (DF) [tos 0x10] 
22:24:51.774495 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 2799 win 10880 <nop,nop,timestamp 1298531 1144366> (DF) [tos 0x10] 
22:24:51.908243 10.0.0.1.1067 > 10.0.0.4.ssh: P 2127:2175(48) ack 2799 win 10880 <nop,nop,timestamp 1298545 1144366> (DF) [tos 0x10] 
22:24:51.914005 10.0.0.4.ssh > 10.0.0.1.1067: P 2799:2847(48) ack 2175 win 10880 <nop,nop,timestamp 1144380 1298545> (DF) [tos 0x10] 
22:24:51.914684 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 2847 win 10880 <nop,nop,timestamp 1298545 1144380> (DF) [tos 0x10] 
22:24:52.255533 10.0.0.1.1067 > 10.0.0.4.ssh: P 2175:2223(48) ack 2847 win 10880 <nop,nop,timestamp 1298579 1144380> (DF) [tos 0x10] 
22:24:52.262635 10.0.0.4.ssh > 10.0.0.1.1067: P 2847:2895(48) ack 2223 win 10880 <nop,nop,timestamp 1144414 1298579> (DF) [tos 0x10] 
22:24:52.263150 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 2895 win 10880 <nop,nop,timestamp 1298580 1144414> (DF) [tos 0x10] 
22:24:52.272030 10.0.0.1.1067 > 10.0.0.4.ssh: P 2223:2271(48) ack 2895 win 10880 <nop,nop,timestamp 1298581 1144414> (DF) [tos 0x10] 
22:24:52.283857 10.0.0.4.ssh > 10.0.0.1.1067: P 2895:2943(48) ack 2271 win 10880 <nop,nop,timestamp 1144417 1298581> (DF) [tos 0x10] 
22:24:52.315992 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 2943 win 10880 <nop,nop,timestamp 1298586 1144417> (DF) [tos 0x10] 
22:24:52.336242 10.0.0.1.1067 > 10.0.0.4.ssh: P 2271:2319(48) ack 2943 win 10880 <nop,nop,timestamp 1298588 1144417> (DF) [tos 0x10] 
22:24:52.342128 10.0.0.4.ssh > 10.0.0.1.1067: P 2943:2991(48) ack 2319 win 10880 <nop,nop,timestamp 1144422 1298588> (DF) [tos 0x10] 
22:24:52.342553 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 2991 win 10880 <nop,nop,timestamp 1298588 1144422> (DF) [tos 0x10] 
22:24:52.610921 10.0.0.1.1067 > 10.0.0.4.ssh: P 2319:2367(48) ack 2991 win 10880 <nop,nop,timestamp 1298615 1144422> (DF) [tos 0x10] 
22:24:52.616245 10.0.0.4.ssh > 10.0.0.1.1067: P 2991:3039(48) ack 2367 win 10880 <nop,nop,timestamp 1144450 1298615> (DF) [tos 0x10] 
22:24:52.616693 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 3039 win 10880 <nop,nop,timestamp 1298616 1144450> (DF) [tos 0x10] 
22:24:52.624705 10.0.0.4.ssh > 10.0.0.1.1067: P 3039:3119(80) ack 2367 win 10880 <nop,nop,timestamp 1144451 1298615> (DF) [tos 0x10] 
22:24:52.625084 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 3119 win 10880 <nop,nop,timestamp 1298616 1144451> (DF) [tos 0x10] 
22:24:52.634013 10.0.0.4.ssh > 10.0.0.1.1067: P 3119:3167(48) ack 2367 win 10880 <nop,nop,timestamp 1144452 1298616> (DF) [tos 0x10] 
22:24:52.634378 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 3167 win 10880 <nop,nop,timestamp 1298617 1144452> (DF) [tos 0x10] 
22:24:52.973017 10.0.0.1.1067 > 10.0.0.4.ssh: P 2367:2415(48) ack 3167 win 10880 <nop,nop,timestamp 1298651 1144452> (DF) [tos 0x10] 
22:24:52.978400 10.0.0.4.ssh > 10.0.0.1.1067: P 3167:3215(48) ack 2415 win 10880 <nop,nop,timestamp 1144486 1298651> (DF) [tos 0x10] 
22:24:52.978833 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 3215 win 10880 <nop,nop,timestamp 1298652 1144486> (DF) [tos 0x10] 
22:24:53.021144 10.0.0.1.1067 > 10.0.0.4.ssh: P 2415:2463(48) ack 3215 win 10880 <nop,nop,timestamp 1298656 1144486> (DF) [tos 0x10] 
22:24:53.029135 10.0.0.4.ssh > 10.0.0.1.1067: P 3215:3263(48) ack 2463 win 10880 <nop,nop,timestamp 1144491 1298656> (DF) [tos 0x10] 
22:24:53.029616 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 3263 win 10880 <nop,nop,timestamp 1298657 1144491> (DF) [tos 0x10] 
22:24:53.077565 10.0.0.1.1067 > 10.0.0.4.ssh: P 2463:2511(48) ack 3263 win 10880 <nop,nop,timestamp 1298662 1144491> (DF) [tos 0x10] 
22:24:53.086408 10.0.0.4.ssh > 10.0.0.1.1067: P 3263:3311(48) ack 2511 win 10880 <nop,nop,timestamp 1144497 1298662> (DF) [tos 0x10] 
22:24:53.086837 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 3311 win 10880 <nop,nop,timestamp 1298663 1144497> (DF) [tos 0x10] 
22:24:53.236449 10.0.0.1.1067 > 10.0.0.4.ssh: P 2511:2559(48) ack 3311 win 10880 <nop,nop,timestamp 1298678 1144497> (DF) [tos 0x10] 
22:24:53.248005 10.0.0.4.ssh > 10.0.0.1.1067: P 3311:3359(48) ack 2559 win 10880 <nop,nop,timestamp 1144513 1298678> (DF) [tos 0x10] 
22:24:53.248436 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 3359 win 10880 <nop,nop,timestamp 1298679 1144513> (DF) [tos 0x10] 
22:24:53.395119 10.0.0.1.1067 > 10.0.0.4.ssh: P 2559:2607(48) ack 3359 win 10880 <nop,nop,timestamp 1298693 1144513> (DF) [tos 0x10] 
22:24:53.400291 10.0.0.4.ssh > 10.0.0.1.1067: P 3359:3407(48) ack 2607 win 10880 <nop,nop,timestamp 1144528 1298693> (DF) [tos 0x10] 
22:24:53.401622 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 3407 win 10880 <nop,nop,timestamp 1298694 1144528> (DF) [tos 0x10] 
22:24:53.405537 10.0.0.4.ssh > 10.0.0.1.1067: P 3407:3455(48) ack 2607 win 10880 <nop,nop,timestamp 1144529 1298693> (DF) [tos 0x10] 
22:24:53.407555 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 3455 win 10880 <nop,nop,timestamp 1298695 1144529> (DF) [tos 0x10] 
22:24:53.595236 10.0.0.1.1067 > 10.0.0.4.ssh: P 2607:2655(48) ack 3455 win 10880 <nop,nop,timestamp 1298713 1144529> (DF) [tos 0x10] 
22:24:53.613214 10.0.0.4.ssh > 10.0.0.1.1067: P 3455:3503(48) ack 2655 win 10880 <nop,nop,timestamp 1144549 1298713> (DF) [tos 0x10] 
22:24:53.614729 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 3503 win 10880 <nop,nop,timestamp 1298715 1144549> (DF) [tos 0x10] 
22:24:53.659406 10.0.0.1.1067 > 10.0.0.4.ssh: P 2655:2703(48) ack 3503 win 10880 <nop,nop,timestamp 1298720 1144549> (DF) [tos 0x10] 
22:24:53.665150 10.0.0.4.ssh > 10.0.0.1.1067: P 3503:3551(48) ack 2703 win 10880 <nop,nop,timestamp 1144555 1298720> (DF) [tos 0x10] 
22:24:53.668138 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 3551 win 10880 <nop,nop,timestamp 1298721 1144555> (DF) [tos 0x10] 
22:24:53.848680 10.0.0.1.1067 > 10.0.0.4.ssh: P 2703:2751(48) ack 3551 win 10880 <nop,nop,timestamp 1298739 1144555> (DF) [tos 0x10] 
22:24:53.855883 10.0.0.4.ssh > 10.0.0.1.1067: P 3551:3599(48) ack 2751 win 10880 <nop,nop,timestamp 1144574 1298739> (DF) [tos 0x10] 
22:24:53.857239 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 3599 win 10880 <nop,nop,timestamp 1298740 1144574> (DF) [tos 0x10] 
22:24:53.893488 10.0.0.4.ssh > 10.0.0.1.1067: P 3599:3791(192) ack 2751 win 10880 <nop,nop,timestamp 1144578 1298740> (DF) [tos 0x10] 
22:24:53.893856 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 3791 win 12160 <nop,nop,timestamp 1298743 1144578> (DF) [tos 0x10] 
22:24:53.897935 10.0.0.4.ssh > 10.0.0.1.1067: P 3791:3983(192) ack 2751 win 10880 <nop,nop,timestamp 1144578 1298740> (DF) [tos 0x10] 
22:24:53.898352 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 3983 win 13440 <nop,nop,timestamp 1298744 1144578> (DF) [tos 0x10] 
22:24:53.900765 10.0.0.4.ssh > 10.0.0.1.1067: P 3983:4175(192) ack 2751 win 10880 <nop,nop,timestamp 1144578 1298743> (DF) [tos 0x10] 
22:24:53.901149 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 4175 win 14720 <nop,nop,timestamp 1298744 1144578> (DF) [tos 0x10] 
22:24:53.905585 10.0.0.4.ssh > 10.0.0.1.1067: P 4175:4223(48) ack 2751 win 10880 <nop,nop,timestamp 1144578 1298743> (DF) [tos 0x10] 
22:24:53.907330 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 4223 win 14720 <nop,nop,timestamp 1298745 1144578> (DF) [tos 0x10] 
22:24:53.908264 10.0.0.4.ssh > 10.0.0.1.1067: P 4223:4271(48) ack 2751 win 10880 <nop,nop,timestamp 1144579 1298744> (DF) [tos 0x10] 
22:24:53.913763 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 4271 win 14720 <nop,nop,timestamp 1298745 1144579> (DF) [tos 0x10] 
22:24:55.532499 10.0.0.1.1067 > 10.0.0.4.ssh: P 2751:2799(48) ack 4271 win 14720 <nop,nop,timestamp 1298907 1144579> (DF) [tos 0x10] 
22:24:55.537943 10.0.0.4.ssh > 10.0.0.1.1067: P 4271:4319(48) ack 2799 win 10880 <nop,nop,timestamp 1144742 1298907> (DF) [tos 0x10] 
22:24:55.538458 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 4319 win 14720 <nop,nop,timestamp 1298908 1144742> (DF) [tos 0x10] 
22:24:55.613948 10.0.0.1.1067 > 10.0.0.4.ssh: P 2799:2847(48) ack 4319 win 14720 <nop,nop,timestamp 1298915 1144742> (DF) [tos 0x10] 
22:24:55.619152 10.0.0.4.ssh > 10.0.0.1.1067: P 4319:4367(48) ack 2847 win 10880 <nop,nop,timestamp 1144750 1298915> (DF) [tos 0x10] 
22:24:55.619575 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 4367 win 14720 <nop,nop,timestamp 1298916 1144750> (DF) [tos 0x10] 
22:24:55.731163 10.0.0.1.1067 > 10.0.0.4.ssh: P 2847:2895(48) ack 4367 win 14720 <nop,nop,timestamp 1298927 1144750> (DF) [tos 0x10] 
22:24:55.745906 10.0.0.4.ssh > 10.0.0.1.1067: P 4367:4415(48) ack 2895 win 10880 <nop,nop,timestamp 1144763 1298927> (DF) [tos 0x10] 
22:24:55.746359 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 4415 win 14720 <nop,nop,timestamp 1298929 1144763> (DF) [tos 0x10] 
22:24:55.781755 10.0.0.4.ssh > 10.0.0.1.1067: P 4415:4607(192) ack 2895 win 10880 <nop,nop,timestamp 1144766 1298929> (DF) [tos 0x10] 
22:24:55.782127 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 4607 win 16000 <nop,nop,timestamp 1298932 1144766> (DF) [tos 0x10] 
22:24:55.791563 10.0.0.4.ssh > 10.0.0.1.1067: P 4607:4799(192) ack 2895 win 10880 <nop,nop,timestamp 1144767 1298929> (DF) [tos 0x10] 
22:24:55.791947 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 4799 win 17280 <nop,nop,timestamp 1298933 1144767> (DF) [tos 0x10] 
22:24:55.804411 10.0.0.4.ssh > 10.0.0.1.1067: P 4799:4991(192) ack 2895 win 10880 <nop,nop,timestamp 1144768 1298932> (DF) [tos 0x10] 
22:24:55.804836 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 4991 win 18560 <nop,nop,timestamp 1298934 1144768> (DF) [tos 0x10] 
22:24:55.806035 10.0.0.4.ssh > 10.0.0.1.1067: P 4991:5039(48) ack 2895 win 10880 <nop,nop,timestamp 1144768 1298932> (DF) [tos 0x10] 
22:24:55.806425 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 5039 win 18560 <nop,nop,timestamp 1298935 1144768> (DF) [tos 0x10] 
22:24:55.806061 10.0.0.4.ssh > 10.0.0.1.1067: P 5039:5087(48) ack 2895 win 10880 <nop,nop,timestamp 1144769 1298933> (DF) [tos 0x10] 
22:24:55.807070 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 5087 win 18560 <nop,nop,timestamp 1298935 1144769> (DF) [tos 0x10] 
22:24:56.521767 10.0.0.1.1067 > 10.0.0.4.ssh: P 2895:2943(48) ack 5087 win 18560 <nop,nop,timestamp 1299006 1144769> (DF) [tos 0x10] 
22:24:56.530417 10.0.0.4.ssh > 10.0.0.1.1067: P 5087:5135(48) ack 2943 win 10880 <nop,nop,timestamp 1144841 1299006> (DF) [tos 0x10] 
22:24:56.530853 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 5135 win 18560 <nop,nop,timestamp 1299007 1144841> (DF) [tos 0x10] 
22:24:56.560601 10.0.0.1.1067 > 10.0.0.4.ssh: P 2943:2991(48) ack 5135 win 18560 <nop,nop,timestamp 1299010 1144841> (DF) [tos 0x10] 
22:24:56.566570 10.0.0.4.ssh > 10.0.0.1.1067: P 5135:5183(48) ack 2991 win 10880 <nop,nop,timestamp 1144845 1299010> (DF) [tos 0x10] 
22:24:56.606076 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 5183 win 18560 <nop,nop,timestamp 1299015 1144845> (DF) [tos 0x10] 
22:24:56.716219 10.0.0.4.ssh > 10.0.0.1.1067: P 5183:5279(96) ack 2991 win 10880 <nop,nop,timestamp 1144860 1299015> (DF) [tos 0x10] 
22:24:56.716626 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 5279 win 18560 <nop,nop,timestamp 1299026 1144860> (DF) [tos 0x10] 
22:24:56.721511 10.0.0.4.ssh > 10.0.0.1.1067: P 5279:5391(112) ack 2991 win 10880 <nop,nop,timestamp 1144860 1299015> (DF) [tos 0x10] 
22:24:56.721861 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 5391 win 18560 <nop,nop,timestamp 1299026 1144860> (DF) [tos 0x10] 
22:24:56.723948 10.0.0.4.ssh > 10.0.0.1.1067: P 5391:5503(112) ack 2991 win 10880 <nop,nop,timestamp 1144860 1299026> (DF) [tos 0x10] 
22:24:56.724389 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 5503 win 18560 <nop,nop,timestamp 1299026 1144860> (DF) [tos 0x10] 
22:24:56.744529 10.0.0.4.ssh > 10.0.0.1.1067: P 5503:5551(48) ack 2991 win 10880 <nop,nop,timestamp 1144863 1299026> (DF) [tos 0x10] 
22:24:56.744913 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 5551 win 18560 <nop,nop,timestamp 1299028 1144863> (DF) [tos 0x10] 
22:24:57.103631 10.0.0.1.1067 > 10.0.0.4.ssh: P 2991:3039(48) ack 5551 win 18560 <nop,nop,timestamp 1299064 1144863> (DF) [tos 0x10] 
22:24:57.110363 10.0.0.4.ssh > 10.0.0.1.1067: P 5551:5599(48) ack 3039 win 10880 <nop,nop,timestamp 1144899 1299064> (DF) [tos 0x10] 
22:24:57.110801 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 5599 win 18560 <nop,nop,timestamp 1299065 1144899> (DF) [tos 0x10] 
22:24:57.175543 10.0.0.1.1067 > 10.0.0.4.ssh: P 3039:3087(48) ack 5599 win 18560 <nop,nop,timestamp 1299071 1144899> (DF) [tos 0x10] 
22:24:57.181167 10.0.0.4.ssh > 10.0.0.1.1067: P 5599:5647(48) ack 3087 win 10880 <nop,nop,timestamp 1144906 1299071> (DF) [tos 0x10] 
22:24:57.181599 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 5647 win 18560 <nop,nop,timestamp 1299072 1144906> (DF) [tos 0x10] 
22:24:57.290787 10.0.0.1.1067 > 10.0.0.4.ssh: P 3087:3135(48) ack 5647 win 18560 <nop,nop,timestamp 1299083 1144906> (DF) [tos 0x10] 
22:24:57.302412 10.0.0.4.ssh > 10.0.0.1.1067: P 5647:5695(48) ack 3135 win 10880 <nop,nop,timestamp 1144918 1299083> (DF) [tos 0x10] 
22:24:57.302924 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 5695 win 18560 <nop,nop,timestamp 1299084 1144918> (DF) [tos 0x10] 
22:24:57.365655 10.0.0.1.1067 > 10.0.0.4.ssh: P 3135:3183(48) ack 5695 win 18560 <nop,nop,timestamp 1299090 1144918> (DF) [tos 0x10] 
22:24:57.375439 10.0.0.4.ssh > 10.0.0.1.1067: P 5695:5743(48) ack 3183 win 10880 <nop,nop,timestamp 1144926 1299090> (DF) [tos 0x10] 
22:24:57.375913 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 5743 win 18560 <nop,nop,timestamp 1299091 1144926> (DF) [tos 0x10] 
22:24:57.473322 10.0.0.1.1067 > 10.0.0.4.ssh: P 3183:3231(48) ack 5743 win 18560 <nop,nop,timestamp 1299101 1144926> (DF) [tos 0x10] 
22:24:57.481102 10.0.0.4.ssh > 10.0.0.1.1067: P 5743:5791(48) ack 3231 win 10880 <nop,nop,timestamp 1144936 1299101> (DF) [tos 0x10] 
22:24:57.481536 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 5791 win 18560 <nop,nop,timestamp 1299102 1144936> (DF) [tos 0x10] 
22:24:57.653996 10.0.0.1.1067 > 10.0.0.4.ssh: P 3231:3279(48) ack 5791 win 18560 <nop,nop,timestamp 1299119 1144936> (DF) [tos 0x10] 
22:24:57.665921 10.0.0.4.ssh > 10.0.0.1.1067: P 5791:5839(48) ack 3279 win 10880 <nop,nop,timestamp 1144954 1299119> (DF) [tos 0x10] 
22:24:57.666415 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 5839 win 18560 <nop,nop,timestamp 1299121 1144954> (DF) [tos 0x10] 
22:24:57.843322 10.0.0.1.1067 > 10.0.0.4.ssh: P 3279:3327(48) ack 5839 win 18560 <nop,nop,timestamp 1299138 1144954> (DF) [tos 0x10] 
22:24:57.852157 10.0.0.4.ssh > 10.0.0.1.1067: P 5839:5887(48) ack 3327 win 10880 <nop,nop,timestamp 1144973 1299138> (DF) [tos 0x10] 
22:24:57.852686 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 5887 win 18560 <nop,nop,timestamp 1299139 1144973> (DF) [tos 0x10] 
22:24:58.172055 10.0.0.1.1067 > 10.0.0.4.ssh: P 3327:3375(48) ack 5887 win 18560 <nop,nop,timestamp 1299171 1144973> (DF) [tos 0x10] 
22:24:58.179729 10.0.0.4.ssh > 10.0.0.1.1067: P 5887:5935(48) ack 3375 win 10880 <nop,nop,timestamp 1145006 1299171> (DF) [tos 0x10] 
22:24:58.180212 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 5935 win 18560 <nop,nop,timestamp 1299172 1145006> (DF) [tos 0x10] 
22:24:58.205903 10.0.0.4.ssh > 10.0.0.1.1067: P 5935:6031(96) ack 3375 win 10880 <nop,nop,timestamp 1145009 1299172> (DF) [tos 0x10] 
22:24:58.206280 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 6031 win 18560 <nop,nop,timestamp 1299175 1145009> (DF) [tos 0x10] 
22:24:58.207106 10.0.0.4.ssh > 10.0.0.1.1067: P 6031:6143(112) ack 3375 win 10880 <nop,nop,timestamp 1145009 1299172> (DF) [tos 0x10] 
22:24:58.207473 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 6143 win 18560 <nop,nop,timestamp 1299175 1145009> (DF) [tos 0x10] 
22:24:58.225912 10.0.0.4.ssh > 10.0.0.1.1067: P 6143:6191(48) ack 3375 win 10880 <nop,nop,timestamp 1145010 1299175> (DF) [tos 0x10] 
22:24:58.226322 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 6191 win 18560 <nop,nop,timestamp 1299177 1145010> (DF) [tos 0x10] 
22:24:59.135625 10.0.0.1.1067 > 10.0.0.4.ssh: P 3375:3423(48) ack 6191 win 18560 <nop,nop,timestamp 1299267 1145010> (DF) [tos 0x10] 
22:24:59.143249 10.0.0.4.ssh > 10.0.0.1.1067: P 6191:6239(48) ack 3423 win 10880 <nop,nop,timestamp 1145102 1299267> (DF) [tos 0x10] 
22:24:59.143678 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 6239 win 18560 <nop,nop,timestamp 1299268 1145102> (DF) [tos 0x10] 
22:24:59.184284 10.0.0.1.1067 > 10.0.0.4.ssh: P 3423:3471(48) ack 6239 win 18560 <nop,nop,timestamp 1299272 1145102> (DF) [tos 0x10] 
22:24:59.190828 10.0.0.4.ssh > 10.0.0.1.1067: P 6239:6287(48) ack 3471 win 10880 <nop,nop,timestamp 1145107 1299272> (DF) [tos 0x10] 
22:24:59.191258 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 6287 win 18560 <nop,nop,timestamp 1299273 1145107> (DF) [tos 0x10] 
22:24:59.350713 10.0.0.1.1067 > 10.0.0.4.ssh: P 3471:3519(48) ack 6287 win 18560 <nop,nop,timestamp 1299289 1145107> (DF) [tos 0x10] 
22:24:59.356227 10.0.0.4.ssh > 10.0.0.1.1067: P 6287:6335(48) ack 3519 win 10880 <nop,nop,timestamp 1145124 1299289> (DF) [tos 0x10] 
22:24:59.356665 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 6335 win 18560 <nop,nop,timestamp 1299290 1145124> (DF) [tos 0x10] 
22:24:59.391800 10.0.0.4.ssh > 10.0.0.1.1067: P 6335:6527(192) ack 3519 win 10880 <nop,nop,timestamp 1145127 1299290> (DF) [tos 0x10] 
22:24:59.392194 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 6527 win 19840 <nop,nop,timestamp 1299293 1145127> (DF) [tos 0x10] 
22:24:59.395907 10.0.0.4.ssh > 10.0.0.1.1067: P 6527:6719(192) ack 3519 win 10880 <nop,nop,timestamp 1145128 1299290> (DF) [tos 0x10] 
22:24:59.396298 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 6719 win 21120 <nop,nop,timestamp 1299294 1145128> (DF) [tos 0x10] 
22:24:59.401913 10.0.0.4.ssh > 10.0.0.1.1067: P 6719:6911(192) ack 3519 win 10880 <nop,nop,timestamp 1145128 1299293> (DF) [tos 0x10] 
22:24:59.402311 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 6911 win 22400 <nop,nop,timestamp 1299294 1145128> (DF) [tos 0x10] 
22:24:59.404396 10.0.0.4.ssh > 10.0.0.1.1067: P 6911:6959(48) ack 3519 win 10880 <nop,nop,timestamp 1145128 1299294> (DF) [tos 0x10] 
22:24:59.404845 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 6959 win 22400 <nop,nop,timestamp 1299294 1145128> (DF) [tos 0x10] 
22:24:59.406436 10.0.0.4.ssh > 10.0.0.1.1067: P 6959:7007(48) ack 3519 win 10880 <nop,nop,timestamp 1145129 1299294> (DF) [tos 0x10] 
22:24:59.406858 10.0.0.1.1067 > 10.0.0.4.ssh: . ack 7007 win 22400 <nop,nop,timestamp 1299295 1145129> (DF) [tos 0x10] 
22:25:04.501029 10.0.0.1.1067 > 10.0.0.4.ssh: P 3519:3567(48) ack 7007 win 22400 <nop,nop,timestamp 1299804 1145129> (DF) [tos 0x10] 
22:25:04.515361 10.0.0.4.ssh > 10.0.0.1.1067: R 563493159:563493159(0) win 0 (DF) [tos 0x10]