[vpnc-devel] SACKs being mangled

[Adrian Bridgett]

On Wed, 2007-02-14 at 16:46 +0000, Adrian Bridgett wrote:

> There may well be an ASA in the way too. Note that the sequence number
> from the server to the client alters between when the server transmits
> it and when the client receives it.  The TCP option bits are
> unaltered, but presumably since the sequence number alters, this has
> an effect on how the SACK numbers are calculated.  
> Aha - yes, this is indeed the case - wireshark was displaying relative
> ack/seq numbers which confused me :-)
> 
> If I disable SACK on the server (but not receiver) the problem is
> fixed. 

Aha - looks like it is the ASA's breaking it after all so nothing to do
with vpnc:

http://www.unidata.ucar.edu/support/help/MailArchives/idd/msg04358.html

Thanks,

Adrian
-- 
Adrian Bridgett
Software Architect


Mobile:  +44 (0) 777 377 8251     Tel :   +44 (0) 1189 294202 
Skype:   abridgett     Email:  adrian.bridgett at opsera.com
www.opsera.com

Opsera Limited | Unit 69 Suttons Business Park
Reading | Berkshire | RG6 1AZ | UK

This e-mail is confidential, intended only for the named recipient(s)
above and may contain information that is privileged and confidential.
If you receive this message in error, or are not the named recipient(s),
please notify the sender at the phone number above, do not copy this
message, do not disclose its contents to anyone, and delete this e-mail
message from your computer. Although Opsera routinely screens for
viruses, addressees should scan this e-mail and any attachments for
viruses. Opsera makes no representation or warranty as to the absence of
viruses in this e-mail or any attachments.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.unix-ag.uni-kl.de/pipermail/vpnc-devel/attachments/20070214/98f6e1bb/attachment.htm