Connection failing between 2 nodes with dropped packets error

[Alexandre Beaulieu]

Cipher is enabled with the default setting (Blowfish CBC)
Digest is disabled
Compression is disabled
MACLength is the default (4 if I remember correctly)

I suspect that the issue is related to the encryption. I tried disabling encryption and the issue wasn’t reproduced during an automated test run of 400 reconnections.

Regards,
Alexandre Beaulieu

> On Nov 22, 2014, at 3:19 PM, Guus Sliepen <guus at tinc-vpn.org> wrote:
> 
> On Wed, Nov 12, 2014 at 02:51:05PM -0500, Alexandre Beaulieu wrote:
> 
>> I'm sometimes getting a failure of connecting 2 nodes when Tinc is started
>> and configured in a LAN. In the logs, there are some unexpected dropped
>> packets with very high or negative seq. I can reproduce this issue ~2% of
>> the time.
> [...]
>> 2014-11-12 18:56:41 tinc.ccvpn[1879]: Packet from node5 (10.60.19.106 port 655) is 1898092539 seqs in the future, dropped (1)
>> 2014-11-12 19:00:53 tinc.ccvpn[1879]: Packet from node5 (10.60.19.106 port 655) is -1038452044 seqs in the future, dropped (2)
>> 2014-11-12 19:01:29 tinc.ccvpn[1879]: Packet from node5 (10.60.19.106 port 655) is -2035506251 seqs in the future, dropped (3)
>> 2014-11-12 19:05:07 tinc.ccvpn[1879]: Packet from node5 (10.60.19.106 port 655) is 1665101896 seqs in the future, dropped (4)
> 
> Hm, this should not happen of course. Can you tell me if you have
> Cipher, Compression, Digest, and/or MACLength set in any of your
> configuration files?
> 
> -- 
> Met vriendelijke groet / with kind regards,
>     Guus Sliepen <guus at tinc-vpn.org>
> _______________________________________________
> tinc mailing list
> tinc at tinc-vpn.org
> http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc