On 10/20/05, Mike Ireton wrote:
> Leonard Isham wrote:
>
> >
> > Merge the encrypted and unencrypted traffic for each side. Look for
> > missing unencrypted packets and then compare encrypted packets that
> > follow and look for a correlation of one or more missing or out of
> > order encrypted
Leonard Isham wrote:
Merge the encrypted and unencrypted traffic for each side. Look for
missing unencrypted packets and then compare encrypted packets that
follow and look for a correlation of one or more missing or out of
order encrypted packets. Also non-trivial.
I think you d
On 10/20/05, Mike Ireton wrote:
> Leonard Isham wrote:
> >
> >>
> >>The problem with this test is that there are many hundreds of OpenVPN
> >>packets per second flying between machine a and machine b - coupla
> >>megabits per second in fact. There is no way to capture just the crypted
> >>ud
Leonard Isham wrote:
>
>>
>>The problem with this test is that there are many hundreds of OpenVPN
>>packets per second flying between machine a and machine b - coupla
>>megabits per second in fact. There is no way to capture just the crypted
>>udp packets carrying the tunneled data involved in the
On 10/20/05, Mike Ireton wrote:
> James Yonan wrote:
>
> >
> > When you do your 1393 byte ping from A to B, the packet is going to travel
> > 1 -> 2 -> 3 -> 4 -> ICMP echo reply on B -> 4 -> 3 -> 2 -> 1.
> >
> > I need to know exactly where the packet is being dropped in this chain.
>
>
> The prob
Mathias Sundman wrote:
Then try using the --fragment option with a rather low value which will
cause OpenVPN todo internal fragrentation to avoid IP fragmentation and
see if the frags goes away, and hopefully the problem as well!
A problem with this - which I am open to doing if it does so
James Yonan wrote:
When you do your 1393 byte ping from A to B, the packet is going to travel
1 -> 2 -> 3 -> 4 -> ICMP echo reply on B -> 4 -> 3 -> 2 -> 1.
I need to know exactly where the packet is being dropped in this chain.
The problem with this test is that there are many hundreds of O
Sent only to Mathias first time. Oops.
-- Forwarded message --
From: Janne Johansson
List-Post: openvpn-devel@lists.sourceforge.net
Date: 2005-okt-20 12:42
Subject: Re: [Openvpn-devel] Bug report (long) - OpenVPN dropping small frames
To: Mathias Sundman
2005/10/20, Mathias Sun
On Wed, 19 Oct 2005, Mike Ireton wrote:
Suspeciously, I also have been observing an excessive number of ICMP "Frag
reassembly time exceeded" messages coming from this openvpn client directed
at the server. Putting 2 and 2 together, these excess icmp messages appear to
be being generated becaus
