то есть я удалил раут, сделал телнет еще раз
root@ts1:~# telnet -b 34.91.122.173 34.78.43.229 22
Trying 34.78.43.229...
Connected to 34.78.43.229.
Escape character is '^]'.
SSH-2.0-OpenSSH_7.9p1 Debian-10+deb10u2
и у меня сниф
root@ts1:~# tshark -Y "ip.addr ==
34.78.43.229"
Running as user "root" and group "root". This could be dangerous.
Capturing on 'eth0'
28 4.871379411
34.91.122.173 →
34.78.43.229 TCP 74 49641 → 22 [SYN] Seq=0 Win=65320 Len=0 MSS=1420 SACK_PERM=1 TSval=2158680444 TSecr=0 WS=128
32 4.880379286
34.78.43.229 →
34.91.122.173 TCP 74 22 → 49641 [SYN, ACK] Seq=0 Ack=1 Win=65160 Len=0 MSS=1460 SACK_PERM=1 TSval=1504029018 TSecr=2158680444 WS=128
33 4.880413923
34.91.122.173 →
34.78.43.229 TCP 66 49641 → 22 [ACK] Seq=1 Ack=1 Win=65408 Len=0 TSval=2158680453 TSecr=1504029018
36 4.917173557
34.78.43.229 →
34.91.122.173 SSH 107 Server: Protocol (SSH-2.0-OpenSSH_7.9p1 Debian-10+deb10u2)
37 4.917206187
34.91.122.173 →
34.78.43.229 TCP 66 49641 → 22 [ACK] Seq=1 Ack=42 Win=65408 Len=0 TSval=2158680490 TSecr=1504029056