I am trying to use wireshark to verify that my outgoing rsync is encrypted. I can easily see that the SSH protocol packets are reported as “Encrypted packet.” The other packets being exchanged are TCP packets, I am not sure how to actually verify if these are encrypted, and if not, if they contain anything sensitive.

Should TCP be encrypted? Can they leak anything when facilitating the ssh connection? How can I tell?

  • yggdar@lemmy.world
    2·
    1 month ago

    Well, if

    1. Wireshark identifies it as a single stream
    2. Wireshark sees gibberish “TCP” and not an SSH connection
    3. The gibberish comes after the SSH stuff that you could see (the stuff in there is going to be the handshake, my bad, that is a bit of a technical term)

    Then we can be quite confident that your connection is indeed encrypted!

    And of course, you’re welcome!