[Openvpn-devel] Bug report (long) - OpenVPN dropping small frames

2005-10-19 Thread Mike Ireton
I'm looking for a solution to a problem with small amounts of packet loss thru Openvpn tunnel, and I think the root cause may be some sort of subtle bug in Openvpn. It appears to be dropping small packets - such as those that result from fragmenting larger frames for crypto/encapsulation - as

[Openvpn-devel] Re: Bug report (long) - OpenVPN dropping small frames

2005-10-20 Thread Mike Ireton
James Yonan wrote: When you do your 1393 byte ping from A to B, the packet is going to travel 1 -> 2 -> 3 -> 4 -> ICMP echo reply on B -> 4 -> 3 -> 2 -> 1. I need to know exactly where the packet is being dropped in this chain. The problem with this test is that there are many hundreds of O

[Openvpn-devel] Re: Bug report (long) - OpenVPN dropping small frames

2005-10-20 Thread Mike Ireton
Mathias Sundman wrote: Then try using the --fragment option with a rather low value which will cause OpenVPN todo internal fragrentation to avoid IP fragmentation and see if the frags goes away, and hopefully the problem as well! A problem with this - which I am open to doing if it does so

[Openvpn-devel] Re: Bug report (long) - OpenVPN dropping small frames

2005-10-20 Thread Mike Ireton
Leonard Isham wrote: > >> >>The problem with this test is that there are many hundreds of OpenVPN >>packets per second flying between machine a and machine b - coupla >>megabits per second in fact. There is no way to capture just the crypted >>udp packets carrying the tunneled data involved in the

[Openvpn-devel] Re: Bug report (long) - OpenVPN dropping small frames

2005-10-20 Thread Mike Ireton
sn't icmp return a copy when it says reassembly failed? Maybe I could look at these - they should be in decrypted form. Hmmm... Mike Ireton