"I don't know what I'm looking for, but I'll know it when I see it."
I have never troubleshooted WinSCP or SSH packets before. Wireshark I've used for years as basic user but not often, and my networking is really fundamentals and "weird stuff I've run into."
Importantly, I kind of know what Normal looks like.