ssh server waits for an ACK from the client

From: Greg Kempe (thelonghotsummer_at_gmail.com)
Date: 05/24/05

  • Next message: Leandro Costa: "Re: SFTP between Linux and Windows" 
    Date: Tue, 24 May 2005 11:25:04 -0700
To: secureshell@securityfocus.com

    Hi.

    I have noticed that a large amount of data moving from an ssh server
    to the client pauses occasionally pending a packet from the client.
    Very simply, I ssh into a remote server and 'cat' a large file (~6
    MB). If I grab the data on the server-client path and prevent it from
    reaching the client, the server stops sending after a while. If I pass
    the grabbed data on to the client, it reads it and sends a small
    packet back to the server, which then starts sending again.

    This is not at the TCP level so I know it isn't a TCP ACK issue. I
    very much doubt it's an issue with 'cat', either. Does ssh wait for an
    application-level ACK every few thousand bytes before continuing to
    send data?

    I am using OpenSSH_4.0p1, OpenSSL 0.9.7g 11 Apr 2005 on cygwin,
    Windows XP sp2. I have had the same results using the same client and
    an ssh server on Linux with OpenSSH_3.8p1, SSH protocols 1.5/2.0,
    OpenSSL 0.9.7d 17 Mar 2004

    Thanks

    Greg

  • Next message: Leandro Costa: "Re: SFTP between Linux and Windows"

    Relevant Pages

    • [REVS] Backdoor Spotcom Analysis
      ... Spotcom is a backdoor client application that allows a hacker to control ... The server IP address is hard-coded in ... msrsvp.exe accepts a couple of command line arguments. ... the packet payload. ...
      (Securiteam)
    • Re: Explanation of SSH
      ... I am still unclear on how SSH works exactly. ... Client issues SSH command and names server ... "Shopper" says "server sends back its public host and server keys ... Surely there is only one public key it sends ...
      (comp.security.ssh)
    • Re: Socket weirdness
      ... client) before you will notice a shutdown receive at server. ... Then eventually a packet comes from the peer, and that will contain data, so the server responds RST: ... way back across the network. ...
      (microsoft.public.dotnet.framework)
    • Re: ssh security question
      ... In my case - the client is a windows client and the ssh is embedded into the windows nx client. ... Is there any reason I can't run ssh-keygen on the server and copy the private key to the client - and the public key to the "authorised" directory? ... sniffer can catch your passwords, and it would make it trivial to log in ...
      (SSH)
    • Re: Publishing a SSH Server
      ... Your unix box cannot reply to SSH request, ... Create a client address set for your unix box (ip address from to are the ... Jim Harrison [ISA SE] ... In that case the server is a SecureNET client but still it doesn't work.... ...
      (microsoft.public.isa.publishing)