Tcpdump command shows 10 requests per second on SSH

Question

When I type "tcpdump" on any VPS server I own I get many requests apparently from my own machine to the SSH port. Is this normal?

score 1 · Answer 1 · answered Nov 14 '18 at 15:24

1

Tcpdump will output to the terminal. Terminal is created by ssh and anything on it is transferred over ssh between your vps and your client machine. This is basically what you see in tcpdump.

So yes, this is normal.

answered Nov 14 '18 at 15:24

Tomek

3,390
1
16
10

score 0 · Answer 2 · answered Nov 14 '18 at 15:24

Without seeing the actual tcpdump commandline and filter options:

You're probably accessing your VPS over SSH to run tcpdump...

Each bit of output from the tcpdump command itself will need to be transmitted over SSH to your screen and gets registered by tcpdump (again generating more SSH traffic)

So that is completely expected.

Tcpdump command shows 10 requests per second on SSH

2 Answers2