[Openswan Users] Packets being dropped

[lee hughes]

you've got a few

 carrier:6          collisions:36887 txqueuelen:1000 
 
on your tx eth1, nothing ot be worried about, but might indicate a
faulty card (if it's connected to a switch).

might be a MTU packet size problem, try pinging the remote gateway
with different size packets, and post you results..

some diag from the remote end may be useful.

also, a traceroute or tracepath of the internet route between you and
your remote gateway,
looks for unsually large number of hops, or packet loss.

has this link been working before? or is a new link?

On 5/7/05, Jeremy Mann <jrmann1999 at gmail.com> wrote:
> I am experiencing a problem with packets needing retransmission.  I'm
> doing a gateway to gateway connection from my home(dynamic IP) to my
> office.  The tunnel never dies, but if I try to do an SSH session
> across the tunnel, I can login just fine but running a ps -ef or top
> or whatever displays a little text then just locks up.  I've done a
> tethereal dump and this is what I see:
> 
> root@$ tethereal -f 'net 10.10.0.0/24' -i eth1
> ...
>  6.149398  10.10.0.148 -> 192.168.1.75 TCP [TCP Dup ACK 115#4] 2347 >
> ssh [ACK] Seq=2216 Ack=2651 Win=16404 Len=0 SLE=2318769310
> SRE=2318769366 SLE=2318767850 SRE=2318767906
>   6.149526  10.10.0.148 -> 192.168.1.75 TCP [TCP Dup ACK 115#5] 2347 >
> ssh [ACK] Seq=2216 Ack=2651 Win=16404 Len=0 SLE=2318769310
> SRE=2318769366 SLE=2318767850 SRE=2318767906
>   6.282641 192.168.1.75 -> 10.10.0.148  SSHv2 [TCP Retransmission]
> Encrypted response packet len=1404
>   6.786695 192.168.1.75 -> 10.10.0.148  SSHv2 [TCP Retransmission]
> Encrypted response packet len=1404
>   7.794792 192.168.1.75 -> 10.10.0.148  SSHv2 [TCP Retransmission]
> Encrypted response packet len=1404
>   9.810995 192.168.1.75 -> 10.10.0.148  SSHv2 [TCP Retransmission]
> Encrypted response packet len=1404
>  13.843391 192.168.1.75 -> 10.10.0.148  SSHv2 [TCP Retransmission]
> Encrypted response packet len=1404
> 
> The last bit happens over and over, which makes me thing something is
> being dropped.  Attached is the output of ipsec barf, I could use some
> help if possible....
> 
> The tunnel in question is home-tunnel, and I added ip addresses to my
> ethernet interfaces with ip addr add instead of doing an ifconfig
> eth0:#
> 
> 
> _______________________________________________
> Users mailing list
> Users at openswan.org
> http://lists.openswan.org/mailman/listinfo/users
> 
> 
> 
>