You are not logged in.

Pages: 1

#1 2014-03-22 22:16:50

psyigit
Member
Registered: 2014-03-22
Posts: 8

[SOLVED] ssh problem (ssh_exchange_identification)

Hello,

I have a problem with the ssh connections. The interesting thing is that I can connect local servers but cant do the same of external servers.

For example github in the below. (The problem is not related to github. This is just an example)

[psyigit@archyigit Documents]$ ssh -vvvT git@github.com
OpenSSH_6.6, OpenSSL 1.0.1f 6 Jan 2014
debug1: Reading configuration data /etc/ssh/ssh_config
debug2: ssh_connect: needpriv 0
debug1: Connecting to github.com [192.30.252.129] port 22.
debug1: Connection established.
debug3: Incorrect RSA1 identifier
debug3: Could not load "/home/psyigit/.ssh/id_rsa" as a RSA1 public key
debug1: identity file /home/psyigit/.ssh/id_rsa type 1
debug1: identity file /home/psyigit/.ssh/id_rsa-cert type -1
debug1: identity file /home/psyigit/.ssh/id_dsa type -1
debug1: identity file /home/psyigit/.ssh/id_dsa-cert type -1
debug1: identity file /home/psyigit/.ssh/id_ecdsa type -1
debug1: identity file /home/psyigit/.ssh/id_ecdsa-cert type -1
debug1: identity file /home/psyigit/.ssh/id_ed25519 type -1
debug1: identity file /home/psyigit/.ssh/id_ed25519-cert type -1
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_6.6
ssh_exchange_identification: Connection closed by remote host

Example from a local server

[psyigit@archyigit Documents]$ ssh -vvvT geant@hansolo                   
OpenSSH_6.6, OpenSSL 1.0.1f 6 Jan 2014
debug1: Reading configuration data /etc/ssh/ssh_config
debug2: ssh_connect: needpriv 0
debug1: Connecting to hansolo [10.3.0.29] port 22.
debug1: Connection established.
debug3: Incorrect RSA1 identifier
debug3: Could not load "/home/psyigit/.ssh/id_rsa" as a RSA1 public key
debug1: identity file /home/psyigit/.ssh/id_rsa type 1
debug1: identity file /home/psyigit/.ssh/id_rsa-cert type -1
debug1: identity file /home/psyigit/.ssh/id_dsa type -1
debug1: identity file /home/psyigit/.ssh/id_dsa-cert type -1
debug1: identity file /home/psyigit/.ssh/id_ecdsa type -1
debug1: identity file /home/psyigit/.ssh/id_ecdsa-cert type -1
debug1: identity file /home/psyigit/.ssh/id_ed25519 type -1
debug1: identity file /home/psyigit/.ssh/id_ed25519-cert type -1
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_6.6
debug1: Remote protocol version 2.0, remote software version OpenSSH_5.3
debug1: match: OpenSSH_5.3 pat OpenSSH_5* compat 0x0c000000
debug2: fd 3 setting O_NONBLOCK
debug3: load_hostkeys: loading entries for host "hansolo" from file "/home/psyigit/.ssh/known_hosts"
debug3: load_hostkeys: found key type RSA in file /home/psyigit/.ssh/known_hosts:1
debug3: load_hostkeys: loaded 1 keys
debug3: order_hostkeyalgs: prefer hostkeyalgs: ssh-rsa-cert-v01@openssh.com,ssh-rsa-cert-v00@openssh.com,ssh-rsa
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug2: kex_parse_kexinit: curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: ssh-rsa-cert-v01@openssh.com,ssh-rsa-cert-v00@openssh.com,ssh-rsa,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ssh-dss-cert-v00@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,ssh-dss
debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se
debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se
debug2: kex_parse_kexinit: hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: none,zlib@openssh.com,zlib
debug2: kex_parse_kexinit: none,zlib@openssh.com,zlib
debug2: kex_parse_kexinit: 
debug2: kex_parse_kexinit: 
debug2: kex_parse_kexinit: first_kex_follows 0 
debug2: kex_parse_kexinit: reserved 0 
debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: ssh-rsa,ssh-dss
debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se
debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: none,zlib@openssh.com
debug2: kex_parse_kexinit: none,zlib@openssh.com
debug2: kex_parse_kexinit: 
debug2: kex_parse_kexinit: 
debug2: kex_parse_kexinit: first_kex_follows 0 
debug2: kex_parse_kexinit: reserved 0 
debug2: mac_setup: setup hmac-md5
debug1: kex: server->client aes128-ctr hmac-md5 none
debug2: mac_setup: setup hmac-md5
debug1: kex: client->server aes128-ctr hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<3072<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug2: bits set: 1477/3072
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Server host key: RSA a3:9c:3f:ef:ab:6d:1f:7b:19:69:05:ea:a2:8c:cf:7d
debug3: load_hostkeys: loading entries for host "hansolo" from file "/home/psyigit/.ssh/known_hosts"
debug3: load_hostkeys: found key type RSA in file /home/psyigit/.ssh/known_hosts:1
debug3: load_hostkeys: loaded 1 keys
debug3: load_hostkeys: loading entries for host "10.3.0.29" from file "/home/psyigit/.ssh/known_hosts"
debug3: load_hostkeys: found key type RSA in file /home/psyigit/.ssh/known_hosts:1
debug3: load_hostkeys: loaded 1 keys
debug1: Host 'hansolo' is known and matches the RSA host key.
debug1: Found key in /home/psyigit/.ssh/known_hosts:1
debug2: bits set: 1542/3072
debug1: ssh_rsa_verify: signature correct
debug2: kex_derive_keys
debug2: set_newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug2: set_newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: Roaming not allowed by server
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug2: service_accept: ssh-userauth
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug2: key: /home/psyigit/.ssh/id_rsa (0xb84e4570),
debug2: key: /home/psyigit/.ssh/id_dsa ((nil)),
debug2: key: /home/psyigit/.ssh/id_ecdsa ((nil)),
debug2: key: /home/psyigit/.ssh/id_ed25519 ((nil)),
debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,password
debug3: start over, passed a different list publickey,gssapi-keyex,gssapi-with-mic,password
debug3: preferred publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Offering RSA public key: /home/psyigit/.ssh/id_rsa
debug3: send_pubkey_test
debug2: we sent a publickey packet, wait for reply
debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,password
debug1: Trying private key: /home/psyigit/.ssh/id_dsa
debug3: no such identity: /home/psyigit/.ssh/id_dsa: No such file or directory
debug1: Trying private key: /home/psyigit/.ssh/id_ecdsa
debug3: no such identity: /home/psyigit/.ssh/id_ecdsa: No such file or directory
debug1: Trying private key: /home/psyigit/.ssh/id_ed25519
debug3: no such identity: /home/psyigit/.ssh/id_ed25519: No such file or directory
debug2: we did not send a packet, disable method
debug3: authmethod_lookup password
debug3: remaining preferred: ,password
debug3: authmethod_is_enabled password
debug1: Next authentication method: password
geant@hansolo's password:

Additionally, I searched through for the problem in this server. The solution proposes to have "SSHD: ALL" into /etc/hosts.allow. But this does not solve my problem though.

[psyigit@archyigit Documents]$ cat /etc/hosts.allow 
#
# /etc/hosts.allow
#
SSHD: ALL
# End of file

I am having very hard time with this issue. Hoping to find an answer. Thanks.

yigit

Last edited by psyigit (2014-03-23 10:06:22)

Offline

#2 2014-03-22 22:19:31

Spider.007
Member
Registered: 2004-06-20
Posts: 1,175

Re: [SOLVED] ssh problem (ssh_exchange_identification)

You should reverse your change in hosts.allow; it has nothing to do with ssh-clients. Could you use a packet-sniffer like tcpdump to capture a working and a non-working exchange? I suspect there is a firewall issue. Do you run iptables on this machine?

Offline

#3 2014-03-22 22:21:11

psyigit
Member
Registered: 2014-03-22
Posts: 8

Re: [SOLVED] ssh problem (ssh_exchange_identification)

Also, output of the following command, maybe it can provide information.

[psyigit@archyigit Documents]$ ssh -v localhost
OpenSSH_6.6, OpenSSL 1.0.1f 6 Jan 2014
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Connecting to localhost [::1] port 22.
debug1: connect to address ::1 port 22: Connection refused
debug1: Connecting to localhost [127.0.0.1] port 22.
debug1: connect to address 127.0.0.1 port 22: Connection refused
ssh: connect to host localhost port 22: Connection refused

Offline

#4 2014-03-22 22:47:27

psyigit
Member
Registered: 2014-03-22
Posts: 8

Re: [SOLVED] ssh problem (ssh_exchange_identification)

Hello again,

I dont know about the programs that you have mentioned. I give some effort by research through internet.

I have tried through my psyigit account but I couldnt listen my connection since it is not listed.

[psyigit@archyigit Documents]$ tcpdump -D
1.dbus-system (D-Bus system bus)
2.dbus-session (D-Bus session bus)

Then with root account,

[root@archyigit Documents]# tcpdump -D
1.nflog (Linux netfilter log (NFLOG) interface)
2.nfqueue (Linux netfilter queue (NFQUEUE) interface)
3.dbus-system (D-Bus system bus)
4.wlp4s0
5.enp7s0
6.any (Pseudo-device that captures on all interfaces)
7.lo

Then I forwarded the output with the following,

[root@archyigit Documents]# tcpdump -i enp7s0 > capture.log
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on enp7s0, link-type EN10MB (Ethernet), capture size 65535 bytes
^C4288 packets captured
4341 packets received by filter
0 packets dropped by kernel

Some of the results are below,

00:39:20.767346 IP 159.20.91.85.56399 > 239.255.255.250.ssdp: UDP, length 133
00:39:20.767779 IP 159.20.91.85.56399 > 239.255.255.250.ssdp: UDP, length 133
00:39:20.799593 IP 159.20.91.132.58346 > 239.255.255.250.ssdp: UDP, length 133
00:39:20.927114 IP 159.20.91.48.netbios-ns > 159.20.91.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
00:39:20.973862 STP 802.1d, Config, Flags [none], bridge-id 8131.88:f0:77:8d:a9:00.8004, length 42
00:39:21.004260 IP 159.20.91.162.netbios-ns > 159.20.91.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
00:39:21.030389 IP 159.20.91.199.netbios-ns > 159.20.91.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
00:39:21.066125 IP 159.20.91.199.db-lsp-disc > 159.20.91.255.db-lsp-disc: UDP, length 104
00:39:21.175743 IP 159.20.91.211.59105 > 239.255.255.250.ssdp: UDP, length 133
00:39:21.256938 STP 802.1s, Rapid STP, CIST Flags [Proposal, Learn, Forward, Agreement], length 102
00:39:21.281294 IP 159.20.91.137.netbios-ns > 159.20.91.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
00:39:21.342150 IP 159.20.91.85.netbios-ns > 159.20.91.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
00:39:21.507487 ARP, Request who-has 159.20.91.199 tell 159.20.91.137, length 46
00:39:21.537088 IP6 fe80::694f:cc17:4869:baa1.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
00:39:21.571645 IP 159.20.91.153.52404 > 239.255.255.250.ssdp: UDP, length 98
00:39:21.580674 IP 159.20.91.196.53529 > 239.255.255.250.ssdp: UDP, length 133
00:39:21.591191 ARP, Request who-has 159.20.91.153 tell 159.20.91.214, length 46
00:39:21.595386 ARP, Request who-has 159.20.91.214 tell 159.20.91.153, length 46
00:39:21.618471 ARP, Request who-has 159.20.91.153 tell 159.20.91.219, length 46
00:39:21.623435 ARP, Request who-has 159.20.91.219 tell 159.20.91.153, length 46
00:39:21.677164 IP 159.20.91.48.netbios-ns > 159.20.91.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
00:39:21.778126 IP archyigit.35475 > intns-scnd.sabanciuniv.edu.domain: 12222+ PTR? 250.255.255.239.in-addr.arpa. (46)
00:39:21.780403 IP 159.20.91.199.netbios-ns > 159.20.91.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
00:39:21.842093 IP intns-scnd.sabanciuniv.edu.domain > archyigit.35475: 12222 NXDomain 0/1/0 (103)
00:39:21.842543 IP archyigit.35688 > intns-scnd.sabanciuniv.edu.domain: 23728+ PTR? 85.91.20.159.in-addr.arpa. (43)
00:39:21.905126 IP intns-scnd.sabanciuniv.edu.domain > archyigit.35688: 23728 NXDomain 0/1/0 (97)
00:39:21.905424 IP archyigit.44076 > intns-scnd.sabanciuniv.edu.domain: 37606+ PTR? 132.91.20.159.in-addr.arpa. (44)
00:39:21.967375 IP intns-scnd.sabanciuniv.edu.domain > archyigit.44076: 37606 NXDomain 0/1/0 (98)
00:39:21.967633 IP archyigit.50231 > intns-scnd.sabanciuniv.edu.domain: 42751+ PTR? 255.91.20.159.in-addr.arpa. (44)
00:39:22.013368 ARP, Request who-has 159.20.91.153 tell 159.20.91.199, length 46
00:39:22.016122 ARP, Request who-has 159.20.91.199 tell 159.20.91.153, length 46
00:39:22.029508 IP intns-scnd.sabanciuniv.edu.domain > archyigit.50231: 42751 NXDomain 0/1/0 (98)
00:39:22.029771 IP archyigit.50716 > intns-scnd.sabanciuniv.edu.domain: 55157+ PTR? 48.91.20.159.in-addr.arpa. (43)
00:39:22.091951 IP 159.20.91.85.netbios-ns > 159.20.91.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
00:39:22.092431 IP intns-scnd.sabanciuniv.edu.domain > archyigit.50716: 55157 NXDomain 0/1/0 (97)
00:39:22.092752 IP archyigit.34577 > intns-scnd.sabanciuniv.edu.domain: 23952+ PTR? 162.91.20.159.in-addr.arpa. (44)
00:39:22.150524 IP 159.20.91.60.57621 > 159.20.91.255.57621: UDP, length 44
00:39:22.154588 IP intns-scnd.sabanciuniv.edu.domain > archyigit.34577: 23952 NXDomain 0/1/0 (98)
00:39:22.154808 IP archyigit.49785 > intns-scnd.sabanciuniv.edu.domain: 2387+ PTR? 199.91.20.159.in-addr.arpa. (44)
00:39:22.172597 ARP, Request who-has 159.20.91.153 tell 159.20.91.127, length 46
00:39:22.175462 ARP, Request who-has 159.20.91.127 tell 159.20.91.153, length 46
00:39:22.204113 ARP, Request who-has 159.20.91.153 tell 159.20.91.58, length 46
00:39:22.206871 ARP, Request who-has 159.20.91.58 tell 159.20.91.153, length 46
00:39:22.224630 IP intns-scnd.sabanciuniv.edu.domain > archyigit.49785: 2387 NXDomain 0/1/0 (98)
00:39:22.224885 IP archyigit.38043 > intns-scnd.sabanciuniv.edu.domain: 8508+ PTR? 211.91.20.159.in-addr.arpa. (44)
00:39:22.287162 IP intns-scnd.sabanciuniv.edu.domain > archyigit.38043: 8508 NXDomain 0/1/0 (98)
00:39:22.287268 IP 159.20.91.251.62615 > 239.255.255.250.ssdp: UDP, length 133
00:39:22.287450 IP archyigit.49107 > intns-scnd.sabanciuniv.edu.domain: 36155+ PTR? 137.91.20.159.in-addr.arpa. (44)
00:39:22.291439 IP6 fe80::f125:e1e4:906c:a236.52771 > ff02::c.ssdp: UDP, length 146
00:39:22.305387 ARP, Request who-has 159.20.91.153 tell 159.20.91.82, length 46
00:39:22.308342 ARP, Request who-has 159.20.91.82 tell 159.20.91.153, length 46
00:39:22.317241 ARP, Request who-has 159.20.91.153 tell 159.20.91.190, length 46
00:39:22.319977 ARP, Request who-has 159.20.91.190 tell 159.20.91.153, length 46
00:39:22.352723 IP intns-scnd.sabanciuniv.edu.domain > archyigit.49107: 36155 NXDomain 0/1/0 (98)
00:39:22.353069 IP archyigit.36348 > intns-scnd.sabanciuniv.edu.domain: 40263+ PTR? 2.0.0.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa. (90)
00:39:22.416480 IP 159.20.91.211.ssdp > 239.255.255.250.ssdp: UDP, length 1015
00:39:22.418780 IP intns-scnd.sabanciuniv.edu.domain > archyigit.36348: 40263 NXDomain 0/1/0 (160)
00:39:22.419009 IP archyigit.53368 > intns-scnd.sabanciuniv.edu.domain: 59619+ PTR? 1.a.a.b.9.6.8.4.7.1.c.c.f.4.9.6.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. (90)
00:39:22.420990 IP intns-scnd.sabanciuniv.edu.domain > archyigit.53368: 59619 NXDomain* 0/1/0 (125)
00:39:22.421242 IP archyigit.49043 > intns-scnd.sabanciuniv.edu.domain: 6075+ PTR? 153.91.20.159.in-addr.arpa. (44)
00:39:22.433504 IP 159.20.91.169 > 239.255.255.246: igmp v2 report 239.255.255.246
00:39:22.440225 IP 159.20.91.48.netbios-ns > 159.20.91.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
00:39:22.484648 IP intns-scnd.sabanciuniv.edu.domain > archyigit.49043: 6075 NXDomain 0/1/0 (98)
00:39:22.484932 IP archyigit.48018 > intns-scnd.sabanciuniv.edu.domain: 2072+ PTR? 196.91.20.159.in-addr.arpa. (44)
00:39:22.510960 IP6 fe80::789c:70c1:4447:7af3.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
00:39:22.537387 IP6 fe80::694f:cc17:4869:baa1.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
00:39:22.549339 IP intns-scnd.sabanciuniv.edu.domain > archyigit.48018: 2072 NXDomain 0/1/0 (98)
00:39:22.549663 IP archyigit.47475 > intns-scnd.sabanciuniv.edu.domain: 56161+ PTR? 214.91.20.159.in-addr.arpa. (44)
00:39:22.553410 IP 159.20.91.153.52404 > 239.255.255.250.ssdp: UDP, length 98
00:39:22.555656 ARP, Request who-has 159.20.91.153 tell 159.20.91.156, length 46
00:39:22.612022 ARP, Request who-has 159.20.91.153 tell 159.20.91.239, length 46
00:39:22.614727 IP intns-scnd.sabanciuniv.edu.domain > archyigit.47475: 56161 NXDomain 0/1/0 (98)
00:39:22.614983 IP archyigit.38426 > intns-scnd.sabanciuniv.edu.domain: 52081+ PTR? 219.91.20.159.in-addr.arpa. (44)
00:39:22.616756 ARP, Request who-has 159.20.91.239 tell 159.20.91.153, length 46
00:39:22.630003 ARP, Request who-has 159.20.91.153 tell 159.20.91.249, length 46
00:39:22.633498 ARP, Request who-has 159.20.91.249 tell 159.20.91.153, length 46
00:39:22.677046 IP intns-scnd.sabanciuniv.edu.domain > archyigit.38426: 52081 NXDomain 0/1/0 (98)
00:39:22.683770 ARP, Request who-has 159.20.91.153 tell 159.20.91.85, length 46
00:39:22.687297 ARP, Request who-has 159.20.91.85 tell 159.20.91.153, length 46
00:39:22.703235 IP6 fe80::789c:70c1:4447:7af3.56396 > ff02::c.ssdp: UDP, length 146
00:39:22.841957 IP 159.20.91.85.netbios-ns > 159.20.91.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
00:39:22.842146 IP archyigit.40931 > intns-scnd.sabanciuniv.edu.domain: 11897+ PTR? 8.1.1.10.in-addr.arpa. (39)
00:39:22.844225 IP intns-scnd.sabanciuniv.edu.domain > archyigit.40931: 11897* 1/1/1 PTR intns-scnd.sabanciuniv.edu. (116)
00:39:22.844425 IP archyigit.48482 > intns-scnd.sabanciuniv.edu.domain: 8955+ PTR? 202.91.20.159.in-addr.arpa. (44)
00:39:22.858104 ARP, Request who-has 159.20.91.153 tell 159.20.91.19, length 46
00:39:22.860928 ARP, Request who-has 159.20.91.153 tell 159.20.91.238, length 46
00:39:22.861377 ARP, Request who-has 159.20.91.19 tell 159.20.91.153, length 46
00:39:22.865016 ARP, Request who-has 159.20.91.238 tell 159.20.91.153, length 46
00:39:22.910880 IP intns-scnd.sabanciuniv.edu.domain > archyigit.48482: 8955 NXDomain 0/1/0 (98)
00:39:22.911330 IP archyigit.48356 > intns-scnd.sabanciuniv.edu.domain: 29229+ PTR? 60.91.20.159.in-addr.arpa. (43)
00:39:22.937720 ARP, Request who-has 159.20.91.153 tell 159.20.91.132, length 46
00:39:22.941189 ARP, Request who-has 159.20.91.132 tell 159.20.91.153, length 46
00:39:22.973275 IP intns-scnd.sabanciuniv.edu.domain > archyigit.48356: 29229 NXDomain 0/1/0 (97)
00:39:22.973471 STP 802.1d, Config, Flags [none], bridge-id 8131.88:f0:77:8d:a9:00.8004, length 42
00:39:22.973553 IP archyigit.40907 > intns-scnd.sabanciuniv.edu.domain: 56569+ PTR? 127.91.20.159.in-addr.arpa. (44)
00:39:23.035734 IP intns-scnd.sabanciuniv.edu.domain > archyigit.40907: 56569 NXDomain 0/1/0 (98)
00:39:23.035988 IP archyigit.35443 > intns-scnd.sabanciuniv.edu.domain: 2389+ PTR? 58.91.20.159.in-addr.arpa. (43)
00:39:23.049857 IP 159.20.91.211.6555 > 239.255.255.239.6555: UDP, length 20
00:39:23.070352 IP 159.20.91.199.netbios-ns > 159.20.91.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
00:39:23.099774 IP intns-scnd.sabanciuniv.edu.domain > archyigit.35443: 2389 NXDomain 0/1/0 (97)
00:39:23.100108 IP archyigit.40939 > intns-scnd.sabanciuniv.edu.domain: 62844+ PTR? 251.91.20.159.in-addr.arpa. (44)
00:39:23.142820 IP 159.20.91.82.49729 > 239.255.255.250.ssdp: UDP, length 133
00:39:23.164615 IP intns-scnd.sabanciuniv.edu.domain > archyigit.40939: 62844 NXDomain 0/1/0 (98)
00:39:23.164917 IP archyigit.45243 > intns-scnd.sabanciuniv.edu.domain: 29748+ PTR? c.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa. (90)
00:39:23.167417 IP 159.20.91.156.57621 > 159.20.91.255.57621: UDP, length 44
00:39:23.190264 IP 159.20.91.48.netbios-ns > 159.20.91.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
00:39:23.227114 IP intns-scnd.sabanciuniv.edu.domain > archyigit.45243: 29748 NXDomain 0/1/0 (160)
00:39:23.227383 IP archyigit.33113 > intns-scnd.sabanciuniv.edu.domain: 19908+ PTR? 6.3.2.a.c.6.0.9.4.e.1.e.5.2.1.f.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. (90)
00:39:23.229031 IP intns-scnd.sabanciuniv.edu.domain > archyigit.33113: 19908 NXDomain* 0/1/0 (125)
00:39:23.229261 IP archyigit.40490 > intns-scnd.sabanciuniv.edu.domain: 58936+ PTR? 82.91.20.159.in-addr.arpa. (43)
00:39:23.250984 STP 802.1s, Rapid STP, CIST Flags [Proposal, Learn, Forward, Agreement], length 102
00:39:23.251090 ARP, Request who-has 159.20.91.153 tell 159.20.91.102, length 46
00:39:23.254299 ARP, Request who-has 159.20.91.102 tell 159.20.91.153, length 46
00:39:23.291933 IP intns-scnd.sabanciuniv.edu.domain > archyigit.40490: 58936 NXDomain 0/1/0 (97)
00:39:23.292178 IP archyigit.39174 > intns-scnd.sabanciuniv.edu.domain: 33619+ PTR? 190.91.20.159.in-addr.arpa. (44)
00:39:23.356557 IP intns-scnd.sabanciuniv.edu.domain > archyigit.39174: 33619 NXDomain 0/1/0 (98)
00:39:23.356877 IP archyigit.34207 > intns-scnd.sabanciuniv.edu.domain: 14951+ PTR? 246.255.255.239.in-addr.arpa. (46)
00:39:23.376386 ARP, Request who-has 159.20.91.153 tell 159.20.91.47, length 46
00:39:23.379658 ARP, Request who-has 159.20.91.47 tell 159.20.91.153, length 46
00:39:23.418869 IP intns-scnd.sabanciuniv.edu.domain > archyigit.34207: 14951 NXDomain 0/1/0 (103)
00:39:23.419093 IP archyigit.54063 > intns-scnd.sabanciuniv.edu.domain: 52112+ PTR? 169.91.20.159.in-addr.arpa. (44)
00:39:23.485856 IP intns-scnd.sabanciuniv.edu.domain > archyigit.54063: 52112 NXDomain 0/1/0 (98)
00:39:23.486197 IP archyigit.56463 > intns-scnd.sabanciuniv.edu.domain: 22893+ PTR? 3.f.a.7.7.4.4.4.1.c.0.7.c.9.8.7.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. (90)
00:39:23.487895 IP intns-scnd.sabanciuniv.edu.domain > archyigit.56463: 22893 NXDomain* 0/1/0 (125)
00:39:23.488122 IP archyigit.37465 > intns-scnd.sabanciuniv.edu.domain: 42048+ PTR? 156.91.20.159.in-addr.arpa. (44)
00:39:23.493557 IP 159.20.91.48.51054 > 239.255.255.250.ssdp: UDP, length 133
00:39:23.493771 IP 159.20.91.48.51054 > 239.255.255.250.ssdp: UDP, length 133
00:39:23.550139 IP intns-scnd.sabanciuniv.edu.domain > archyigit.37465: 42048 NXDomain 0/1/0 (98)
00:39:23.550378 IP archyigit.47898 > intns-scnd.sabanciuniv.edu.domain: 15403+ PTR? 239.91.20.159.in-addr.arpa. (44)
00:39:23.577101 00:23:47:d4:a7:c4 (oui Unknown) > 09:00:09:09:13:a6 (oui Unknown), ethertype Unknown (0x88b7), length 60: 
        0x0000:  0800 0900 0302 003c 0051 2d47 0023 47d4  .......<.Q-G.#G.
        0x0010:  a700 76be cf11 84ec 3849 6d1a 80cc f8ad  ..v.....8Im.....
        0x0020:  7f58 47fb 52d3 0000 0000 0000 0000       .XG.R.........
00:39:23.605983 IP 159.20.91.85.netbios-ns > 159.20.91.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
00:39:23.613419 IP intns-scnd.sabanciuniv.edu.domain > archyigit.47898: 15403 NXDomain 0/1/0 (98)
00:39:23.613661 IP archyigit.49901 > intns-scnd.sabanciuniv.edu.domain: 19868+ PTR? 249.91.20.159.in-addr.arpa. (44)
00:39:23.634075 IP 159.20.91.162.mdns > 224.0.0.251.mdns: 0 [2a] [9q] [1au] PTR (QM)? _apple-mobdev._tcp.local. PTR (QM)? 51030596._sub._apple-mobdev2._tcp.local. PTR (QM)? _daap._tcp.local. P
TR (QM)? _appletv-pair._tcp.local. PTR (QM)? _appletv._tcp.local. PTR (QM)? _touch-remote._tcp.local. PTR (QM)? _raop._tcp.local. PTR (QM)? _airplay._tcp.local. PTR (QM)? _sleep-proxy._udp.loc
al. (300)
00:39:23.675793 IP intns-scnd.sabanciuniv.edu.domain > archyigit.49901: 19868 NXDomain 0/1/0 (98)
00:39:23.703143 IP 159.20.91.219.56657 > 239.255.255.250.ssdp: UDP, length 133
00:39:23.821414 IP 159.20.91.199.netbios-ns > 159.20.91.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
00:39:23.821693 IP archyigit.36250 > intns-scnd.sabanciuniv.edu.domain: 62275+ PTR? 19.91.20.159.in-addr.arpa. (43)
00:39:23.830289 IP6 fe80::694f:cc17:4869:baa1.55351 > ff02::1:3.llmnr: UDP, length 22
00:39:23.830565 IP 159.20.91.238.55351 > 224.0.0.252.llmnr: UDP, length 22
00:39:23.831188 IP6 fe80::694f:cc17:4869:baa1.50806 > ff02::1:3.llmnr: UDP, length 22
00:39:23.831577 IP 159.20.91.238.50806 > 224.0.0.252.llmnr: UDP, length 22
00:39:23.883987 IP intns-scnd.sabanciuniv.edu.domain > archyigit.36250: 62275 NXDomain 0/1/0 (97)
00:39:23.884277 IP archyigit.59833 > intns-scnd.sabanciuniv.edu.domain: 31219+ PTR? 238.91.20.159.in-addr.arpa. (44)
00:39:23.906113 ARP, Request who-has 159.20.91.153 tell 159.20.91.251, length 46
00:39:23.940281 IP 159.20.91.48.netbios-ns > 159.20.91.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
00:39:23.948841 IP intns-scnd.sabanciuniv.edu.domain > archyigit.59833: 31219 NXDomain 0/1/0 (98)
00:39:23.949169 IP archyigit.54362 > intns-scnd.sabanciuniv.edu.domain: 60317+ PTR? 239.255.255.239.in-addr.arpa. (46)
00:39:24.009676 ARP, Request who-has 159.20.91.153 tell 159.20.91.169, length 46
00:39:24.012112 IP intns-scnd.sabanciuniv.edu.domain > archyigit.54362: 60317 NXDomain 0/1/0 (103)
00:39:24.012459 IP archyigit.58000 > intns-scnd.sabanciuniv.edu.domain: 35567+ PTR? 102.91.20.159.in-addr.arpa. (44)
00:39:24.016331 ARP, Request who-has 159.20.91.169 tell 159.20.91.153, length 46
00:39:24.075305 IP intns-scnd.sabanciuniv.edu.domain > archyigit.58000: 35567 NXDomain 0/1/0 (98)
00:39:24.075626 IP archyigit.49290 > intns-scnd.sabanciuniv.edu.domain: 47983+ PTR? 47.91.20.159.in-addr.arpa. (43)
00:39:24.138518 IP intns-scnd.sabanciuniv.edu.domain > archyigit.49290: 47983 NXDomain 0/1/0 (97)
00:39:24.138978 IP archyigit.50023 > intns-scnd.sabanciuniv.edu.domain: 64460+ PTR? 251.0.0.224.in-addr.arpa. (42)
00:39:24.202465 IP intns-scnd.sabanciuniv.edu.domain > archyigit.50023: 64460 NXDomain 0/1/0 (99)
00:39:24.240850 IP6 fe80::694f:cc17:4869:baa1.50806 > ff02::1:3.llmnr: UDP, length 22
00:39:24.241282 IP6 fe80::694f:cc17:4869:baa1.55351 > ff02::1:3.llmnr: UDP, length 22
00:39:24.241295 IP 159.20.91.238.50806 > 224.0.0.252.llmnr: UDP, length 22
00:39:24.241301 IP 159.20.91.238.55351 > 224.0.0.252.llmnr: UDP, length 22
00:39:24.356036 IP 159.20.91.85.netbios-ns > 159.20.91.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
00:39:24.430802 IP 159.20.91.169.db-lsp-disc > 255.255.255.255.db-lsp-disc: UDP, length 103
00:39:24.436412 IP 159.20.91.169.db-lsp-disc > 255.255.255.255.db-lsp-disc: UDP, length 103
00:39:24.436595 IP 159.20.91.169.db-lsp-disc > 255.255.255.255.db-lsp-disc: UDP, length 103
00:39:24.436753 IP 159.20.91.169.db-lsp-disc > 159.20.91.255.db-lsp-disc: UDP, length 103
00:39:24.530420 IP 159.20.91.137.netbios-ns > 159.20.91.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
00:39:24.538097 IP6 fe80::694f:cc17:4869:baa1.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
00:39:24.571514 IP 159.20.91.199.netbios-ns > 159.20.91.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
00:39:24.647267 IP 159.20.91.196.53529 > 239.255.255.250.ssdp: UDP, length 133
00:39:24.703279 IP 159.20.91.48.netbios-ns > 159.20.91.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
00:39:24.973358 STP 802.1d, Config, Flags [none], bridge-id 8131.88:f0:77:8d:a9:00.8004, length 42
00:39:24.973582 IP archyigit.37698 > intns-scnd.sabanciuniv.edu.domain: 18437+ PTR? 3.0.0.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa. (90)
00:39:25.036566 IP intns-scnd.sabanciuniv.edu.domain > archyigit.37698: 18437 NXDomain 0/1/0 (160)
00:39:25.036836 IP archyigit.42872 > intns-scnd.sabanciuniv.edu.domain: 57901+ PTR? 252.0.0.224.in-addr.arpa. (42)
00:39:25.098682 IP intns-scnd.sabanciuniv.edu.domain > archyigit.42872: 57901 NXDomain 0/1/0 (99)
00:39:25.099153 IP archyigit.54292 > intns-scnd.sabanciuniv.edu.domain: 23230+ PTR? 255.255.255.255.in-addr.arpa. (46)
00:39:25.100804 IP intns-scnd.sabanciuniv.edu.domain > archyigit.54292: 23230* 0/1/0 (81)
00:39:25.106132 IP 159.20.91.85.netbios-ns > 159.20.91.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
00:39:25.250863 STP 802.1s, Rapid STP, CIST Flags [Proposal, Learn, Forward, Agreement], length 102
00:39:25.280541 IP 159.20.91.137.netbios-ns > 159.20.91.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
00:39:25.292737 IP6 fe80::f125:e1e4:906c:a236.52771 > ff02::c.ssdp: UDP, length 146
00:39:25.376305 IP 159.20.91.251.62615 > 239.255.255.250.ssdp: UDP, length 133
00:39:25.393956 IP6 fe80::694f:cc17:4869:baa1.53605 > ff02::1:3.llmnr: UDP, length 22
00:39:25.394675 IP 159.20.91.238.53605 > 224.0.0.252.llmnr: UDP, length 22
00:39:25.396616 IP 159.20.91.238.61687 > 224.0.0.252.llmnr: UDP, length 22
00:39:25.396628 IP6 fe80::694f:cc17:4869:baa1.61687 > ff02::1:3.llmnr: UDP, length 22
00:39:25.453423 IP 159.20.91.48.netbios-ns > 159.20.91.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
00:39:25.658710 IP 159.20.91.174.ssdp > 239.255.255.250.ssdp: UDP, length 1014
00:39:25.703566 IP6 fe80::789c:70c1:4447:7af3.56396 > ff02::c.ssdp: UDP, length 146
00:39:25.806893 IP6 fe80::694f:cc17:4869:baa1.61687 > ff02::1:3.llmnr: UDP, length 22
00:39:25.807218 IP archyigit.40655 > intns-scnd.sabanciuniv.edu.domain: 37210+ PTR? 174.91.20.159.in-addr.arpa. (44)
00:39:25.810437 IP6 fe80::694f:cc17:4869:baa1.53605 > ff02::1:3.llmnr: UDP, length 22
00:39:25.810447 IP 159.20.91.238.61687 > 224.0.0.252.llmnr: UDP, length 22
00:39:25.810454 IP 159.20.91.238.53605 > 224.0.0.252.llmnr: UDP, length 22
00:39:25.870164 IP 159.20.91.85.netbios-ns > 159.20.91.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
00:39:25.873746 IP intns-scnd.sabanciuniv.edu.domain > archyigit.40655: 37210 NXDomain 0/1/0 (98)
00:39:26.030534 IP 159.20.91.137.netbios-ns > 159.20.91.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
00:39:26.143924 IP 159.20.91.82.49729 > 239.255.255.250.ssdp: UDP, length 133
00:39:26.145373 ARP, Request who-has 159.20.91.1 tell 159.20.91.162, length 46
00:39:26.203463 IP 159.20.91.48.netbios-ns > 159.20.91.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
00:39:26.382392 IP 159.20.91.137.ssdp > 239.255.255.250.ssdp: UDP, length 1015
00:39:26.423914 IP 159.20.91.162.52281 > 239.255.255.250.ssdp: UDP, length 133
00:39:26.493745 IP 159.20.91.48.51054 > 239.255.255.250.ssdp: UDP, length 133
00:39:26.493843 IP 159.20.91.48.51054 > 239.255.255.250.ssdp: UDP, length 133
00:39:26.511213 IP6 fe80::789c:70c1:4447:7af3.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
00:39:26.518594 IP 159.20.91.80.db-lsp-disc > 255.255.255.255.db-lsp-disc: UDP, length 123
00:39:26.523822 IP 159.20.91.80.db-lsp-disc > 255.255.255.255.db-lsp-disc: UDP, length 123
00:39:26.523987 IP 159.20.91.80.db-lsp-disc > 255.255.255.255.db-lsp-disc: UDP, length 123
00:39:26.524138 IP 159.20.91.80.db-lsp-disc > 159.20.91.255.db-lsp-disc: UDP, length 123
00:39:26.620063 IP 159.20.91.85.netbios-ns > 159.20.91.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
00:39:26.647892 IP 159.20.91.85.56399 > 239.255.255.250.ssdp: UDP, length 133
00:39:26.682653 IP6 fe80::a481:cecb:b010:b35e.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
00:39:26.709724 IP 159.20.91.219.56657 > 239.255.255.250.ssdp: UDP, length 133
00:39:26.746095 IP 159.20.91.162.mdns > 224.0.0.251.mdns: 0*- [0q] 4/0/4 (Cache flush) PTR SU18442.local., (Cache flush) PTR SU18442.local., (Cache flush) A 159.20.91.162, (Cache flush) AAAA f
e80::c8e2:1ab3:bd0d:d60c (270)
00:39:26.750056 ARP, Request who-has 169.254.0.1 tell 159.20.91.47, length 46
00:39:26.841538 IP6 fe80::1d33:1333:4264:f6d6.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
00:39:26.841801 IP archyigit.53149 > intns-scnd.sabanciuniv.edu.domain: 53760+ PTR? 1.91.20.159.in-addr.arpa. (42)
00:39:26.856263 IP6 fe80::694f:cc17:4869:baa1.57472 > ff02::1:3.llmnr: UDP, length 22
00:39:26.856712 IP 159.20.91.238.57472 > 224.0.0.252.llmnr: UDP, length 22
00:39:26.857257 IP6 fe80::694f:cc17:4869:baa1.62855 > ff02::1:3.llmnr: UDP, length 22
00:39:26.857652 IP 159.20.91.238.62855 > 224.0.0.252.llmnr: UDP, length 22
00:39:26.904317 IP intns-scnd.sabanciuniv.edu.domain > archyigit.53149: 53760 NXDomain 0/1/0 (96)
00:39:26.904586 IP archyigit.52749 > intns-scnd.sabanciuniv.edu.domain: 6027+ PTR? 80.91.20.159.in-addr.arpa. (43)

Are there any specific command for me to perform let me know?

yigit

Offline

#5 2014-03-23 01:00:49

psyigit
Member
Registered: 2014-03-22
Posts: 8

Re: [SOLVED] ssh problem (ssh_exchange_identification)

The problem is gone all of a sudden. Maybe just a server problem in the university.

Thanks again.

Offline

#6 2014-03-23 02:47:09

jasonwryan
Anarchist
From: .nz
Registered: 2009-05-09
Posts: 30,426
Website

Re: [SOLVED] ssh problem (ssh_exchange_identification)

Please remember to mark your thread as [Solved] by editing your first post and prepending it to the title.

Arch + dwm   •   Mercurial repos  •   Surfraw

Registered Linux User #482438

Offline

Pages: 1

Board footer

Powered by FluxBB