Cipher is enabled with the default setting (Blowfish CBC) Digest is disabled Compression is disabled MACLength is the default (4 if I remember correctly)
I suspect that the issue is related to the encryption. I tried disabling encryption and the issue wasn’t reproduced during an automated test run of 400 reconnections. Regards, Alexandre Beaulieu > On Nov 22, 2014, at 3:19 PM, Guus Sliepen <[email protected]> wrote: > > On Wed, Nov 12, 2014 at 02:51:05PM -0500, Alexandre Beaulieu wrote: > >> I'm sometimes getting a failure of connecting 2 nodes when Tinc is started >> and configured in a LAN. In the logs, there are some unexpected dropped >> packets with very high or negative seq. I can reproduce this issue ~2% of >> the time. > [...] >> 2014-11-12 18:56:41 tinc.ccvpn[1879]: Packet from node5 (10.60.19.106 port >> 655) is 1898092539 seqs in the future, dropped (1) >> 2014-11-12 19:00:53 tinc.ccvpn[1879]: Packet from node5 (10.60.19.106 port >> 655) is -1038452044 seqs in the future, dropped (2) >> 2014-11-12 19:01:29 tinc.ccvpn[1879]: Packet from node5 (10.60.19.106 port >> 655) is -2035506251 seqs in the future, dropped (3) >> 2014-11-12 19:05:07 tinc.ccvpn[1879]: Packet from node5 (10.60.19.106 port >> 655) is 1665101896 seqs in the future, dropped (4) > > Hm, this should not happen of course. Can you tell me if you have > Cipher, Compression, Digest, and/or MACLength set in any of your > configuration files? > > -- > Met vriendelijke groet / with kind regards, > Guus Sliepen <[email protected]> > _______________________________________________ > tinc mailing list > [email protected] > http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc _______________________________________________ tinc mailing list [email protected] http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc
