On Mon, Nov 28, 2016 at 12:59 PM, Stuart Luppescu <slu at ccsr.uchicago.edu> wrote: > Yeah, if only I could reproduce it. It generally only happens at night > when I'm not using the computer, but it's still connected. (Last week I > was doing some very, very long analyses that had to run over night, and > I had to leave the VPN connected. I lost all that work when the VPN > disconnected and had to do it all over again. I should have done it in > a screen. Grrr.) I generally leave it running all the time, but I don't > think I've seen it cut off during the day when I'm using it. I could > set up Wireshark but I wonder if I have enough disk space to capture > all the packets until it fails. Something like this should work: https://ask.wireshark.org/questions/5838/rolling-capture-for-a-weeks-long-event Combine that with a filter to only keep traffic to/from the gateway (e.g. dumpcap -f 'host cvpn.uchicago.edu' -i eth0) and you should have a manageable capture size. Dan
