Subject: Re: ssh/sshd crashing with Disconnecting: Bad packet length messages
To: Christos Zoulas <christos@astron.com>
From: Andreas Wrede <andreas@planix.com>
List: current-users
Date: 12/18/2007 13:22:33
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--Apple-Mail-7-651622163
Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes
Content-Transfer-Encoding: 7bit


On Dec 17, 2007, at 22:35 , Christos Zoulas wrote:

> In article <47671AF1.3010201@flame.org>, M Graff   
> <explorer@flame.org> wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> This has started happening both in a -current to -current setup, and
>> between a 4.0 BETA 2 box to whatever cvs.netbsd.org is running.
>>
>> There seems to be no common reason for this; I've had it happen when
>> ssh'ing locally to a box on the same wire as me, and when ssh'ing  
>> over a
>> IP tunnel which is probably making packets fragment.
>>
>> netsat -s reports no packets with bad checksums in any protocol, and
>> nothing else that jumps out at me as a potential cause.
>>
>> Until today, every time this occurred it was between a machines I  
>> own on
>> both sides.  Today, it happened with the sshd that comes from the
>> 4.0_BETA2 install I made (and did not compile myself) and  
>> cvs.netbsd.org.
>>
>
> I've seen that with IPSEC tunnels...  Are you running over an IPSEC  
> tunnel?


I see this with gre(4) tunnels, IPSEC transport over gre(4) tunnels to  
be precise. Switching the VPN configuration to use IPSEC tunnels  
without gre(4) interfaces works fine.

-- 
    aew


--Apple-Mail-7-651622163
content-type: application/pgp-signature; x-mac-type=70674453;
	name=PGP.sig
content-description: This is a digitally signed message part
content-disposition: inline; filename=PGP.sig
content-transfer-encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (Darwin)

iD8DBQFHaA/qEh/h9J/TQyERAtT5AKC/5LI+ZgJFJi6otzGTuuoi1ZbzBQCg2QtD
ZCXrN5p/8vuX+gLVeJ+8f2M=
=nlf2
-----END PGP SIGNATURE-----

--Apple-Mail-7-651622163--