here is the TCP dump with the related MySQL Frames, captured on the server:
Frame 4: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits)
Linux cooked capture
Internet Protocol Version 4, Src: 192.168.130.188, Dst: 192.168.130.172
Transmission Control Protocol, Src Port: 3306, Dst Port: 51504, Seq: 1, Ack: 1, Len: 60
MySQL Protocol
Packet Length: 56
Packet Number: 0
Server Greeting
Protocol: 10
Version: 5.0.77-log
Thread ID: 3555
Salt: YB{gp"PO
Server Capabilities: 0xa22c
Server Language: latin1 COLLATE latin1_swedish_ci (8)
Server Status: 0x0002
Extended Server Capabilities: 0x0000
Authentication Plugin Length: 0
Unused: 00000000000000000000
Salt: "}F$!wW/$cGxI
Frame 6: 146 bytes on wire (1168 bits), 146 bytes captured (1168 bits)
Linux cooked capture
Internet Protocol Version 4, Src: 192.168.130.172, Dst: 192.168.130.188
Transmission Control Protocol, Src Port: 51504, Dst Port: 3306, Seq: 1, Ack: 61, Len: 78
MySQL Protocol
Packet Length: 74
Packet Number: 1
Login Request
Client Capabilities: 0xf3cf
Extended Client Capabilities: 0x0007
MAX Packet: 0
Charset: utf8 COLLATE utf8_general_ci (33)
Username: xxxxxxxxxxxx
Password: xxxxxxxxxxxxxxxx
Schema: test
Frame 8: 73 bytes on wire (584 bits), 73 bytes captured (584 bits)
Linux cooked capture
Internet Protocol Version 4, Src: 192.168.130.188, Dst: 192.168.130.172
Transmission Control Protocol, Src Port: 3306, Dst Port: 51504, Seq: 61, Ack: 79, Len: 5
MySQL Protocol
Packet Length: 1
Packet Number: 2
EOF marker: 254
[Expert Info (Warning/Protocol): EOF Marker found while connection in wrong state.]
[EOF Marker found while connection in wrong state.]
[Severity level: Warning]
[Group: Protocol]
Frame 9: 80 bytes on wire (640 bits), 80 bytes captured (640 bits)
Linux cooked capture
Internet Protocol Version 4, Src: 192.168.130.172, Dst: 192.168.130.188
Transmission Control Protocol, Src Port: 51504, Dst Port: 3306, Seq: 79, Ack: 66, Len: 12
MySQL Protocol
Packet Length: 8
Packet Number: 3
Request Command Unknown (67)
Command: Unknown (67)
Payload: 4e5a5355474f4b
[Expert Info (Warning/Protocol): Unknown/invalid command code]
[Unknown/invalid command code]
[Severity level: Warning]
[Group: Protocol]
Frame 10: 94 bytes on wire (752 bits), 94 bytes captured (752 bits)
Linux cooked capture
Internet Protocol Version 4, Src: 192.168.130.188, Dst: 192.168.130.172
Transmission Control Protocol, Src Port: 3306, Dst Port: 51504, Seq: 66, Ack: 91, Len: 26
MySQL Protocol
Packet Length: 22
Packet Number: 4
Error Code: 1043
SQL state: 08S01
Error message: Bad handshake
Server Language is latin1 COLLATE latin1_swedish_ci (8)
Client Charset during login: Charset: utf8 COLLATE utf8_general_ci (33)
Can this be the problem?