Random disconnects

[2df46c2fb3 1]

Hi,

 

Since a couple of months now my AirVPN client experiences random disconnects.

Connecting to different servers doesn't help.

 

I'm seeing a lot of errors like these in the logs, but based on the time they occur they don't seem to have anything to do with the disconnects:

 

. 2015.04.25 12:25:16 - OpenVPN > Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #941810 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
 

This is where the disconnect and reconnect begins:

 

. 2015.04.25 11:07:13 - Updating systems & servers data ...
. 2015.04.25 11:07:13 - Systems & servers data update completed
. 2015.04.25 11:12:52 - OpenVPN > [server] Inactivity timeout (--ping-restart), restarting
. 2015.04.25 11:12:52 - OpenVPN > SIGUSR1[soft,ping-restart] received, process restarting
. 2015.04.25 11:12:52 - OpenVPN > Restart pause, 2 second(s)
! 2015.04.25 11:12:52 - Disconnecting
. 2015.04.25 11:12:52 - Management - Send 'signal SIGTERM'
. 2015.04.25 11:12:52 - OpenVPN > MANAGEMENT: CMD 'signal SIGTERM'
. 2015.04.25 11:12:52 - OpenVPN > MANAGEMENT: Client disconnected
. 2015.04.25 11:12:52 - OpenVPN > Assertion failed at misc.c:788
. 2015.04.25 11:12:52 - OpenVPN > Exiting due to fatal error
. 2015.04.25 11:12:52 - Connection terminated.
I 2015.04.25 11:13:01 - Checking authorization ...
! 2015.04.25 11:13:02 - Connecting to Mizar (Netherlands, Amsterdam)
. 2015.04.25 11:13:02 - OpenVPN > OpenVPN 2.3.6 x86_64-w64-mingw32 [sSL (OpenSSL)] [LZO] [iPv6] built on Jan 12 2015
. 2015.04.25 11:13:02 - OpenVPN > library versions: OpenSSL 1.0.1k 8 Jan 2015, LZO 2.08
. 2015.04.25 11:13:02 - OpenVPN > MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:3100
. 2015.04.25 11:13:02 - OpenVPN > Control Channel Authentication: tls-auth using INLINE static key file
. 2015.04.25 11:13:02 - OpenVPN > Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2015.04.25 11:13:02 - OpenVPN > Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2015.04.25 11:13:02 - OpenVPN > Socket Buffers: R=[8192->8192] S=[8192->8192]
. 2015.04.25 11:13:02 - OpenVPN > UDPv4 link local: [undef]
. 2015.04.25 11:13:02 - OpenVPN > UDPv4 link remote: [AF_INET]37.48.74.18:443
. 2015.04.25 11:13:02 - OpenVPN > TLS: Initial packet from [AF_INET]37.48.74.18:443, sid=43b93436 ad0b7faa
. 2015.04.25 11:13:02 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org
. 2015.04.25 11:13:02 - OpenVPN > Validating certificate key usage
. 2015.04.25 11:13:02 - OpenVPN > ++ Certificate has key usage  00a0, expects 00a0
. 2015.04.25 11:13:02 - OpenVPN > VERIFY KU OK
. 2015.04.25 11:13:02 - OpenVPN > Validating certificate extended key usage
. 2015.04.25 11:13:02 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
. 2015.04.25 11:13:02 - OpenVPN > VERIFY EKU OK
. 2015.04.25 11:13:02 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org
. 2015.04.25 11:13:02 - OpenVPN > Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
. 2015.04.25 11:13:02 - OpenVPN > Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2015.04.25 11:13:02 - OpenVPN > Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
. 2015.04.25 11:13:02 - OpenVPN > Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2015.04.25 11:13:02 - OpenVPN > Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 4096 bit RSA
. 2015.04.25 11:13:02 - OpenVPN > [server] Peer Connection Initiated with [AF_INET]37.48.74.18:443
. 2015.04.25 11:13:04 - OpenVPN > SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
. 2015.04.25 11:13:04 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.4.0.1,comp-lzo no,route-gateway 10.4.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.4.2.16 255.255.0.0'
. 2015.04.25 11:13:04 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified
. 2015.04.25 11:13:04 - OpenVPN > OPTIONS IMPORT: LZO parms modified
. 2015.04.25 11:13:04 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified
. 2015.04.25 11:13:04 - OpenVPN > OPTIONS IMPORT: route options modified
. 2015.04.25 11:13:04 - OpenVPN > OPTIONS IMPORT: route-related options modified
. 2015.04.25 11:13:04 - OpenVPN > OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
. 2015.04.25 11:13:04 - OpenVPN > do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
. 2015.04.25 11:13:04 - OpenVPN > open_tun, tt->ipv6=0
. 2015.04.25 11:13:04 - OpenVPN > TAP-WIN32 device [LAN-verbinding 2] opened: \\.\Global\{C05534B7-1477-4C76-82E9-147087917E2E}.tap
. 2015.04.25 11:13:04 - OpenVPN > TAP-Windows Driver Version 9.9
. 2015.04.25 11:13:04 - OpenVPN > Set TAP-Windows TUN subnet mode network/local/netmask = 10.4.0.0/10.4.2.16/255.255.0.0 [sUCCEEDED]
. 2015.04.25 11:13:04 - OpenVPN > Notified TAP-Windows driver to set a DHCP IP/netmask of 10.4.2.16/255.255.0.0 on interface {C05534B7-1477-4C76-82E9-147087917E2E} [DHCP-serv: 10.4.255.254, lease-time: 31536000]
. 2015.04.25 11:13:04 - OpenVPN > Successful ARP Flush on interface [13] {C05534B7-1477-4C76-82E9-147087917E2E}
. 2015.04.25 11:13:09 - OpenVPN > TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
. 2015.04.25 11:13:09 - OpenVPN > C:\Windows\system32\route.exe ADD 37.48.74.18 MASK 255.255.255.255 192.168.0.254
. 2015.04.25 11:13:09 - OpenVPN > ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=10 and dwForwardType=4
. 2015.04.25 11:13:09 - OpenVPN > Route addition via IPAPI succeeded [adaptive]
. 2015.04.25 11:13:09 - OpenVPN > C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.4.0.1
. 2015.04.25 11:13:09 - OpenVPN > ROUTE: route addition failed using CreateIpForwardEntry: Het object bestaat al.   [status=5010 if_index=13]
. 2015.04.25 11:13:09 - OpenVPN > Route addition via IPAPI failed [adaptive]
. 2015.04.25 11:13:09 - OpenVPN > Route addition fallback to route.exe
. 2015.04.25 11:13:09 - OpenVPN > env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
. 2015.04.25 11:13:09 - OpenVPN > C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.4.0.1
. 2015.04.25 11:13:09 - OpenVPN > ROUTE: route addition failed using CreateIpForwardEntry: Het object bestaat al.   [status=5010 if_index=13]
. 2015.04.25 11:13:09 - OpenVPN > Route addition via IPAPI failed [adaptive]
. 2015.04.25 11:13:09 - OpenVPN > Route addition fallback to route.exe
. 2015.04.25 11:13:09 - OpenVPN > env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
. 2015.04.25 11:13:09 - Starting Management Interface
. 2015.04.25 11:13:09 - OpenVPN > Initialization Sequence Completed
I 2015.04.25 11:13:09 - Flushing DNS
I 2015.04.25 11:13:09 - Checking route
! 2015.04.25 11:13:09 - Connected.
. 2015.04.25 11:13:09 - OpenVPN > MANAGEMENT: Client connected from [AF_INET]127.0.0.1:3100
. 2015.04.25 11:13:09 - OpenVpn Management > >INFO:OpenVPN Management Interface Version 1 -- type 'help' for more info
 

During this time there is no inactivity from my part as I was downloading files at that moment.

 

I'm using the latest x64 Windows-client, version 2.8.8, connected thought Ethernet, nof WiFi.

I see in the changelog on the website that there is a 2.9 version, but it is not available for download.

 

The complete logfile with a couple of disconnects is attached.

 

Does anyone have any idea why this could be happening and what I could do to fix this?

 

Thanks.

AirVPN_20150425_131905.txt

[OpenSourcerer 1435]

Let's see if some of the following topics can help you..

 

https://airvpn.org/topic/14094-weird-log-entries

 

https://airvpn.org/topic/12462-am-i-under-attack-bad-packet-id

 

https://airvpn.org/topic/10879-getting-continuous-authenticatedecrypt-spam-in-system-log-for-ovpn-airvpn

 

https://airvpn.org/topic/10817-continuous-authenticatedecrypt-packet-error-when-connected

[zhang888 1066]

Well this is probably your answer:

 

. 2015.04.25 11:12:52 - OpenVPN > [server] Inactivity timeout (--ping-restart), restarting
. 2015.04.25 11:12:52 - OpenVPN > SIGUSR1[soft,ping-restart] received, process restarting

 

During this time there is no inactivity from my part as I was downloading files at that moment.

 

The fact that you have pending downloads in some application queue has little to nothing to do with the -network- meaning of a timeout.

Probably your ISP, or power saving profile settings are the cause. Did you notice that all your reconnection logs are on the 13th minute every hour?

[2df46c2fb3 1]

Thank you both for your replies.

 

@zhang888: Yes I did notice the reconnectes happening at the 13th minute. That's the weird part. Somewhere there must be a timer running and checking time-outs every hour or so.

 

I'm currently doing a test connecting to servers in different countries to see if that changes anything.

I'll post my findings here soon.

[2df46c2fb3 1]

Well I think I figured out what the problem was. Using different VPN servers did not matter.

My home network situation is as follows:

 

Internet < ----- > Cable modem with build-in router < ---- > my own router < ----- > my pc

 

A couple of months ago I got a new cable modem. My old one did not have a build-in router, the new one does. My own own router is connected to it via DHCP, which has a lease time of 60 minutes.

Knowing from the VPN logs that the connection resets every sixty minutes this was too much of a coincidence.

 

So I removed my own router from the network completely and set up the built-in router on the cable modem like my own router was set up.

Now I no longer have problems with disconnects.

 

Weird thing is that my pc was also on DHCP, so I gave it a static IP. So check that as well if you're having disconnection problems.

[bluesjunior 43]

If like me you're a Virgin Media customer then their is an option available to reset their cable modem/router box in "modem only mode". I would prefer to do that and use my own router rather than the cheap and cheerful VM equipment.

[cyberninja 2]

I had a similar problem whereby my VPN connection would disconnect after being is use for about 60 minutes. Then I would have to manually reconnect to get it going again for another 60 minutes. This would repeat until I solved the problem.


To find the the problem I checked the messages log (I run Linux so for my system I check the messages log in /var/log/). In the messages log I found messages for inactivity timeout and ping-restart. Even though I was always active whether browsing, downloading a file, or watching a video, it would always show a disconnect with inactivity timeout. I found the cause of this problem: in the firewall settings there is a toggle for allowing or disallowing 'ping from WAN' which means allowing or disallowing a ping from outside the router / internet. Mine was set to disallow pings from the WAN/internet. After I toggled it to allow pings from outside the router / internet, my VPN connection stayed alive indefinitely - no more disconnects. So what seems to be happening is the AirVPN server periodically sends pings to the client (your computer) to check for activity. If the AirVPN server ping can't get through because your firewall is blocking it, then your computer doesn't see it and therefore doesn't respond with a ping back to the server. When this is the case, the silence the AirVPN server experiences from the client makes it think there is no activity, so it disconnects the VPN connection.


When I had a Verizon Actiontec router the ping option was defaulted to allow pings from the outside. When I recently switched to ASUS RT-N66U its default was to disallow pings from the outside and that's when my disconnect issue began.


To modify your router's firewall setting you'll need to look up the instructions for accessing it: for the ASUS routers (and many others) you can access it by opening a browser in your connected computer and entering web-address 192.168.1.1. When the login page shows you'll have to enter your login name and password (check the sticker on the router for the default username and password if you've never done this before). Once in, find the firewall area and look for the settings. Don't forget to save/apply any changes you've made before exiting.