Ssh – Can anyone monitor the ssh (scp) file transfers

ssh

I am working on distributed architecture where we have automated data distributions using bit-torrent. But sometimes we need instant access to some data stored on remote server. So I wanted to know how secure SSH (SCP) file transfers are (generally tar.gz of Images OR 2-3GB access logs). Can my ISP or anyone else sense what I am transferring and intercept them?

Also how network manage will see these data on their monitoring server?

Best Answer

The SSH/SCP traffic will be practically impervious to snooping (presuming you validate server fingerprints the first time you're connecting to prevent man-in-the-middle shenanigans).

From an attackers point of view, it'll look a little like this XKCD comic:

http://xkcd.com/538/

Basically, an attacker will find it more useful to compromise the end points (perhaps by beating you with a $5 wrench) than to try to snoop the traffic itself.