SSH keystroke packets

SSH packets are sent by the client and immediately echoed back by the server. They are also roughly the same size.

This can be used to detect human interaction in SSH sessions by observing timings and size of packets in a packet capture.

timinganalysisssh-song_wagner_tian2001

---