Hmmm... Interesting. I saw the client sent a SID in the first place without the semicolon and the server prompts cannot find the SID (still without semicolon) but never thought of that. Thanks for pointing it out. On 1/28/2014 2:09 AM, Nikos Mavrogiannopoulos wrote: > On 01/27/2014 11:17 PM, Tony Zhou wrote: >> Hi Nikos, >> >> In this case "someSID" refers to the exactly same SID in the log. >> Jan 28 07:15:34 area11 ocserv[23039]: client.ip.address:54325 HTTP: >> Cookie: webvpncontext=FCwcG8aB8lCeQ2Mp; > There is an issue here with the ';'. The Cookie parsing code cannot > handle it and that's why you see the issue. It seems ocserv needs a > better cookie parsing code. > > regards, > Nikos >