On Mon, 2016-11-28 at 15:38 -0500, Stuart Luppescu wrote: > > I will do this. This seemed to coincide with upgrades to our analysis > servers, but that should not have anything to do with the VPN gateway, > should it? Maybe if they caused packets to be seen out of order, which would be odd. And would have to be coupled with a strange bug like the historical OpenSSL one, which is also unlikely. If you could ever reproduce that bug, I'd be very interested to see a packet capture of the UDP frames on the public network, along with the master-secret and session-id headers from the VPN negotiation. You would be giving me *all* the traffic from that network connection though, if you did that. And you'd want to sign off that session before sending them too, or I could use the secret/session-id to connect for myself. So maybe just capture them to a file, and I can talk you through interpreting them with wireshark. -- dwmw2 -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 5760 bytes Desc: not available URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20161128/7f02ea54/attachment-0001.bin>
