Ask Your Question

Revision history [back]

Wireshark sshdump does not send ssh sequence Client: Key Exchange Init


While testing the wireshark feature sshdump, it seems that Wireshark never sent the ssh sequence "Client: Key Exchange Init" (which is following the ssh sequence Server: Protocol SSH-2.0 / Client: Protocol SSH-2.0)

It means that if the requested remote server does not sent first "Server: Key Exchange Init" ssh sequence, the ssh connection will never been established between wireshark sshdump and the remote server.

Is it normal that wireshark never send "Client: Key Exchange Init" ? Or is it triggered by a specific wireshark options ?

Wireshark version : 3.4.1 (v3.4.1-0-g1a27f405875f) Same behavior on 3.4.0