Debugging dropped shell connections over a VPN

2011-07-07 Thread Paul Keusemann
Hello, I am having problems with dropped shell connections over a VPN and I need help diagnosing the problem. My setup is something like this: - My local network is a mix of AIX, HP-UX, Linux, FreeBSD and Solaris machines running various OS versions. - My gateway / firewall machine is runn

Re: Debugging dropped shell connections over a VPN

2011-07-07 Thread Chuck Swiger
On Jul 7, 2011, at 4:45 AM, Paul Keusemann wrote: > My setup is something like this: > - My local network is a mix of AIX, HP-UX, Linux, FreeBSD and Solaris > machines running various OS versions. > - My gateway / firewall machine is running FreeBSD-8.1-RELEASE-p1 with ipfw, > nat and racoon for

Re: Debugging dropped shell connections over a VPN

2011-07-12 Thread Paul Keusemann
On 07/07/11 14:39, Chuck Swiger wrote: On Jul 7, 2011, at 4:45 AM, Paul Keusemann wrote: My setup is something like this: - My local network is a mix of AIX, HP-UX, Linux, FreeBSD and Solaris machines running various OS versions. - My gateway / firewall machine is running FreeBSD-8.1-RELEASE-p

Re: Debugging dropped shell connections over a VPN

2011-07-12 Thread Chuck Swiger
On Jul 12, 2011, at 12:26 PM, Paul Keusemann wrote: > So, any other ideas on how to debug this? Gather data with tcpdump. If you do it on one of the VPN endpoints, you ought to see the VPN contents rather than just packets going by in the encrypted tunnel. > Anybody know how to get racoon to l

Re: Debugging dropped shell connections over a VPN

2011-07-20 Thread Gary Palmer
On Tue, Jul 12, 2011 at 02:26:34PM -0500, Paul Keusemann wrote: > On 07/07/11 14:39, Chuck Swiger wrote: > >On Jul 7, 2011, at 4:45 AM, Paul Keusemann wrote: > >>My setup is something like this: > >>- My local network is a mix of AIX, HP-UX, Linux, FreeBSD and Solaris > >>machines running various

Re: Debugging dropped shell connections over a VPN

2011-07-26 Thread Paul Keusemann
Once again, apologies for my sluggish response. The VPN problem is a background job worked on when I can or when I'm too annoyed by it to do anything else. On 07/12/11 17:42, Chuck Swiger wrote: On Jul 12, 2011, at 12:26 PM, Paul Keusemann wrote: So, any other ideas on how to debug this? Ga

Re: Debugging dropped shell connections over a VPN

2011-07-26 Thread Paul Keusemann
Again, sorry for the sluggish response. On 07/20/11 15:15, Gary Palmer wrote: On Tue, Jul 12, 2011 at 02:26:34PM -0500, Paul Keusemann wrote: On 07/07/11 14:39, Chuck Swiger wrote: On Jul 7, 2011, at 4:45 AM, Paul Keusemann wrote: My setup is something like this: - My local network is a mix o

Re: Debugging dropped shell connections over a VPN

2011-07-26 Thread Gary Palmer
On Tue, Jul 26, 2011 at 06:53:59AM -0500, Paul Keusemann wrote: > Again, sorry for the sluggish response. > > On 07/20/11 15:15, Gary Palmer wrote: > >On Tue, Jul 12, 2011 at 02:26:34PM -0500, Paul Keusemann wrote: > >>On 07/07/11 14:39, Chuck Swiger wrote: > >>>On Jul 7, 2011, at 4:45 AM, Paul Ke

Re: Debugging dropped shell connections over a VPN

2011-07-26 Thread Paul Keusemann
On 07/26/11 08:05, Gary Palmer wrote: On Tue, Jul 26, 2011 at 06:53:59AM -0500, Paul Keusemann wrote: Again, sorry for the sluggish response. On 07/20/11 15:15, Gary Palmer wrote: On Tue, Jul 12, 2011 at 02:26:34PM -0500, Paul Keusemann wrote: On 07/07/11 14:39, Chuck Swiger wrote: On Jul 7,

Re: Debugging dropped shell connections over a VPN

2011-07-27 Thread Gary Palmer
On Tue, Jul 26, 2011 at 01:35:16PM -0500, Paul Keusemann wrote: > On 07/26/11 08:05, Gary Palmer wrote: > >On Tue, Jul 26, 2011 at 06:53:59AM -0500, Paul Keusemann wrote: > >>Again, sorry for the sluggish response. > >> > >>On 07/20/11 15:15, Gary Palmer wrote: > >>>On Tue, Jul 12, 2011 at 02:26:34

Re: Debugging dropped shell connections over a VPN

2011-07-27 Thread Paul Keusemann
On 07/27/11 06:50, Gary Palmer wrote: On Tue, Jul 26, 2011 at 01:35:16PM -0500, Paul Keusemann wrote: On 07/26/11 08:05, Gary Palmer wrote: On Tue, Jul 26, 2011 at 06:53:59AM -0500, Paul Keusemann wrote: Again, sorry for the sluggish response. On 07/20/11 15:15, Gary Palmer wrote: On Tue, Ju