> There's a further 2 packets of ssh data exchanged in each
> direction but that maybe just the login banner and $ prompt.

Correction, I only let it go as far as the password prompt, these last 2
packets are something to do with prompting the user for a password.

-Andrew

-- 
sparc sun4c stuff : http://www.lostgeneration.freeserve.co.uk/sparc
personal email    : bob at lostgeneration dot freeserve dot co dot uk