[vpn-help] Updated package and problem reports

Peter Eisch peter at boku.net
Fri Aug 18 05:43:17 CDT 2006


On 8/18/06 1:57 AM, "Matthew Grooms" <mgrooms at shrew.net> wrote:

> When performing IP frag/reass, the TCP checksum is never regenerated
> only the IP checksum. The only scenarios where a TCP checksum would be
> bad is if (a) the original checksum was incorrectly generated ( by
> windows in this case ) or (b) the data is not reproduced accurately in
> the fragmented IP datagrams. I think (b) is the more likely scenario.
> 

Is there reassembly?  I though the only time frags got reassembled was on a
proxy server or on the remote application.  VPN software can't possibly
cache chunks of payload for arbitrary periods of time, can it?  Maybe I need
to read more code.

> Always ;) When you check any of the three check boxes that say "enable
> packet dump of ..." in the ipsect application the daemon will produce
> pcap files ( not a text decode in the log file ). These cap files
> contain a more or less accurate recording of all traffic related to the
> VPN Client communications. If you want to see the decode or look at the
> hex, open one of the files with ethereal for win32 ;)

Where do these files live?  I guess because I live outside of the app's home
in Program Files I haven't stumbled across them.

I'll hit the client here when I'm up for real.

Thanks again,

peter




More information about the vpn-help mailing list