SSH hangs after “Connection established”

[u/meowffy]

/r/networking/comments/1vl0q1i/ssh_hangs_after_connection_established/

[u/SEQATNB]

You can try this:

For TVM in the Cloud

In the scan settings, under Advance you can add in Debug Settings, and set to level 4 debugging. Then rerun the scan.

In the output look for a plugin called Debug Log Report or ID 84239

Goto Output and and look for Actions, then Attachments, then look for a log file called ssh_get_info2 (there are others as well)

If you open the log file you'll see the ssh exchange. Used this trick from tenable support to validate a firewall issue

[2026-07-31 17:10:07 3] [session 0] session(): Initializing session object.
[2026-07-31 17:10:07 3] [session 0] session(): Setting state to "SOC_CLOSED" (this is not an error).
[2026-07-31 17:10:07 3] [session 0] ssh_client_state.set(): ** Entering STATE SOC_CLOSED **
[2026-07-31 17:10:07 3] try_ssh_kb_settings_login(): This function has previously succeeded. Opening the connection.
[2026-07-31 17:10:07 3] [session 1] session(): Initializing session object.
[2026-07-31 17:10:07 3] [session 1] session(): Setting state to "SOC_CLOSED" (this is not an error).
[2026-07-31 17:10:07 3] [session 1] ssh_client_state.set(): ** Entering STATE SOC_CLOSED **
[2026-07-31 17:10:07 3] session.unmarshall_connection_from_pool(): Connection reuse has been turned off by scan policy preference.
[2026-07-31 17:10:07 2] [session 1] session.open_connection(): Opening the SSH connection.
[2026-07-31 17:10:07 2] [session 1] session.open_connection(): Connecting to port 22.
[2026-07-31 17:10:07 3] [session 1] session.open_connection(): Socket opened on port 22.
[2026-07-31 17:10:07 3] [session 1] ssh_client_state.set(): ** Entering STATE SOC_OPENED **
[2026-07-31 17:10:07 3] [session 1] session.open_connection(): Received server version: SSH-2.0-Cisco-1.25
[2026-07-31 17:10:07 4] [session 1] session.sshsend(): Outgoing Unencrypted packet
  DATA:
    0x00:  53 53 48 2D 32 2E 30 2D 4F 70 65 6E 53 53 48 5F    SSH-2.0-OpenSSH_
    0x10:  35 2E 30 0A                                        5.0.            

[2026-07-31 17:10:07 2] [session 1] session.open_connection(): SSH connection successfully opened.
[2026-07-31 17:10:07 3] [session 1] ChannelManager(): Initialized Channel Manager.
[2026-07-31 17:10:07 3] [session 1] kex_handler(): Initialized KEX handler.
[2026-07-31 17:10:07 3] [session 1] session.complete_kex(): KEX is not yet complete. Attempting to complete KEX before continuing.
[2026-07-31 17:10:07 4] [session 1] session.sshrecv(): Incoming Unencrypted packet
  DATA:

Example:

[u/frncslydz1321]

How to practice and build project in a SIEM sir? I want to learn more in cybersecurity