On Sat, Nov 15, 2014 at 12:04 PM, David Woodhouse <dwmw2 at infradead.org> wrote: > >> So the issue is to figure who is sending the UDP packets without an >> associated TCP session. > > > If a client is afflicted by NAT, especially CG-NAT, it's possible that > separate connections may appear to come from *different* IP addresses. > Some NAT setups have a *pool* of public-facing addresses. Indeed I am behind a NAT which I don't know the exact setup (This is @work). So I guess thats the problem since I run one openconnect client at a time. Thanks for debugging this!