Authenticate/decrypt packet error / Replay issue / Connection restarting itself

[hungryhammer 0]

Hello,

 

I recently started experiencing Authenicate/decrypt packet error messages several times in one minute. This particularly happens when torrents are running and in both Mac and Linux environments. I've tried to switch to other servers but similar errors occur. This started when I recently switched from DSL to mobile broadband (LTE).

 

These errors seem not to cause any problems but because of them (?) the VPN connection resets from time to time. Due to that some programs that I'm running which require uninterrupted connection are not working very well.

 

Is there a fix to this annoying problem? Replay errors are not so bad but connection resets are.

 

Some lines taken from connection log (IP addresses XXed on purpose):

 

 

Tue Oct 20 01:00:12 2015 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #2328338 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings

Tue Oct 20 01:03:33 2015 [server] Inactivity timeout (--ping-restart), restarting

Tue Oct 20 01:03:33 2015 SIGUSR1[soft,ping-restart] received, process restarting

Tue Oct 20 01:03:33 2015 Restart pause, 2 second(s)

Tue Oct 20 01:03:35 2015 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

Tue Oct 20 01:03:35 2015 Socket Buffers: R=[163840->131072] S=[163840->131072]

Tue Oct 20 01:03:35 2015 UDPv4 link local: [undef]

Tue Oct 20 01:03:35 2015 UDPv4 link remote: [AF_INET]91.214.XXX.XX:443

Tue Oct 20 01:03:35 2015 TLS: Initial packet from [AF_INET]91.214.XXX.XX:443, sid=ecacdce1 d03f3e3b

Tue Oct 20 01:03:35 2015 VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org

Tue Oct 20 01:03:35 2015 Validating certificate key usage

Tue Oct 20 01:03:35 2015 ++ Certificate has key usage  00a0, expects 00a0

Tue Oct 20 01:03:35 2015 VERIFY KU OK

Tue Oct 20 01:03:35 2015 Validating certificate extended key usage

Tue Oct 20 01:03:35 2015 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication

Tue Oct 20 01:03:35 2015 VERIFY EKU OK

Tue Oct 20 01:03:35 2015 VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org

Tue Oct 20 01:03:41 2015 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

Tue Oct 20 01:03:41 2015 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

Tue Oct 20 01:03:41 2015 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

Tue Oct 20 01:03:41 2015 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

Tue Oct 20 01:03:41 2015 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 4096 bit RSA

Tue Oct 20 01:03:41 2015 [server] Peer Connection Initiated with [AF_INET]91.214.XXX.XX:443

Tue Oct 20 01:03:43 2015 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)

Tue Oct 20 01:03:43 2015 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.4.0.1,comp-lzo no,route-gateway 10.4.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.4.X.XXX 255.255.0.0'

Tue Oct 20 01:03:43 2015 OPTIONS IMPORT: timers and/or timeouts modified

Tue Oct 20 01:03:43 2015 OPTIONS IMPORT: LZO parms modified

Tue Oct 20 01:03:43 2015 OPTIONS IMPORT: --ifconfig/up options modified

Tue Oct 20 01:03:43 2015 OPTIONS IMPORT: route options modified

Tue Oct 20 01:03:43 2015 OPTIONS IMPORT: route-related options modified

Tue Oct 20 01:03:43 2015 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified

Tue Oct 20 01:03:43 2015 Preserving previous TUN/TAP instance: tun0

Tue Oct 20 01:03:43 2015 Initialization Sequence Completed

Tue Oct 20 01:07:12 2015 [server] Inactivity timeout (--ping-restart), restarting

Tue Oct 20 01:07:12 2015 SIGUSR1[soft,ping-restart] received, process restarting

Tue Oct 20 01:07:12 2015 Restart pause, 2 second(s)

Tue Oct 20 01:07:14 2015 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

Tue Oct 20 01:07:14 2015 Socket Buffers: R=[163840->131072] S=[163840->131072]

Tue Oct 20 01:07:14 2015 UDPv4 link local: [undef]

Tue Oct 20 01:07:14 2015 UDPv4 link remote: [AF_INET]91.214.XXX.XX:443

Tue Oct 20 01:07:14 2015 TLS: Initial packet from [AF_INET]91.214.XXX.XX:443, sid=8735b9c1 ff680cd1

Tue Oct 20 01:07:14 2015 VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org

 

 

[eyes878 43]

I would also like to say that I experienced this for short periods when torrents were active on my Linux machine. I have never ever experienced it without torrents active.

 

EDIT: I never had any restarts; only replay packets or whatever they are.

[hungryhammer 0]

It seems that it's not an operating system or client software related problem since the same happens on both Mac and Linux. It must be something with torrenting. Could it be that AirVPN servers can't handle that many simultaneous peer connections via mobile broadband? These problems never occurred in DSL.

 

I'd appreciate if someone from AirVPN staff could comment on this topic.