Can't connect to nested OpenVPN

chavo11 · 17 January 2022 00:21

Hi everybody!
I need to connect my laptop to a particular VPN setup for work.
First I need to connect to my company VPN(1) and then to another VPN(2).

The connection to VPN1 goes flawlessy but I’m not able to then connect to VPN2, that it’s an OpenVPN.
The config file is correct and it works perfectly on Windows.

I’ve already tried a bunch of different solutions, includin using the network-manager-openvpn-plugin, installing openvpn3 and following their tutorial and trying with nmcli with no success.

A bunch of logs/information:
(tried also with 5.13.13 kernel)

uname -a
Linux fazi 5.15.12-1-MANJARO #1 SMP PREEMPT Wed Dec 29 18:08:07 UTC 2021 x86_64 GNU/Linux

journalctl -xe
gen 17 00:53:15 fazi kernel: audit: type=1111 audit(1642377195.788:209): pid=527 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='op=connection-activate uuid=f48f98aa-de5d-43f3-8348-c35d958d9d41 name="CSE" pid=1178 uid=1000 result=success exe="/usr/bin/NetworkManager" hostname=? addr=? terminal=? res=succe>
gen 17 00:53:15 fazi NetworkManager[527]: <info>  [1642377195.7966] vpn-connection[0x55b9e0090370,f48f98aa-de5d-43f3-8348-c35d958d9d41,"CSE",0]: Started the VPN service, PID 35306
gen 17 00:53:15 fazi NetworkManager[527]: <info>  [1642377195.8045] vpn-connection[0x55b9e0090370,f48f98aa-de5d-43f3-8348-c35d958d9d41,"CSE",0]: Saw the service appear; activating connection
gen 17 00:53:15 fazi NetworkManager[527]: <info>  [1642377195.8122] vpn-connection[0x55b9e0090370,f48f98aa-de5d-43f3-8348-c35d958d9d41,"CSE",0]: VPN plugin: state changed: starting (3)
gen 17 00:53:15 fazi NetworkManager[527]: <info>  [1642377195.8122] vpn-connection[0x55b9e0090370,f48f98aa-de5d-43f3-8348-c35d958d9d41,"CSE",0]: VPN connection: (ConnectInteractive) reply received
gen 17 00:53:15 fazi nm-openvpn[35310]: DEPRECATED OPTION: --cipher set to 'AES-128-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-128-CBC' to --data-ciphers or change --cipher 'AES-128-CBC' to --data-ciphers-fallback 'AES-1>
gen 17 00:53:15 fazi nm-openvpn[35310]: OpenVPN 2.5.5 [git:makepkg/869f194c23ae93c4+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Dec 15 2021
gen 17 00:53:15 fazi nm-openvpn[35310]: library versions: OpenSSL 1.1.1m  14 Dec 2021, LZO 2.10
gen 17 00:53:16 fazi nm-openvpn[35310]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
gen 17 00:53:16 fazi nm-openvpn[35310]: RESOLVE: Cannot resolve host address: openvpn.mycompanynet.prv:1217 (Name or service not known)
gen 17 00:53:16 fazi nm-openvpn[35310]: RESOLVE: Cannot resolve host address: openvpn.mycompanynet.prv:1217 (Name or service not known)
gen 17 00:53:16 fazi nm-openvpn[35310]: Could not determine IPv4/IPv6 protocol
gen 17 00:53:16 fazi nm-openvpn[35310]: NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
gen 17 00:53:16 fazi nm-openvpn[35310]: SIGUSR1[soft,init_instance] received, process restarting
gen 17 00:53:21 fazi nm-openvpn[35310]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
gen 17 00:53:21 fazi nm-openvpn[35310]: RESOLVE: Cannot resolve host address: openvpn.mycompanynet.prv:1217 (Name or service not known)

[fciava@fazi ~]$ sudo tcpdump
tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
listening on wlp0s20f3, link-type EN10MB (Ethernet), snapshot length 262144 bytes
00:53:13.421326 IP fazi.db-lsp-disc > 192.168.0.255.db-lsp-disc: UDP, length 145
00:53:13.421416 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 3516613467:3516613670, ack 4221360694, win 4318, options [nop,nop,TS val 3847736421 ecr 1565759889], length 203
00:53:13.428607 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 203, win 11, options [nop,nop,TS val 1565759937 ecr 3847736421], length 0
00:53:13.515106 IP fazi.56757 > _gateway.domain: 55341+ PTR? 255.0.168.192.in-addr.arpa. (44)
00:53:13.516246 IP _gateway.domain > fazi.56757: 55341* 1/0/0 PTR 192.168.0.255. (71)
00:53:13.516479 IP fazi.37001 > _gateway.domain: 52174+ PTR? 25.225.218.91.in-addr.arpa. (44)
00:53:13.518509 IP _gateway.domain > fazi.37001: 52174 1/0/0 PTR 25.225.218.91.in-addr.arpa. (84)
00:53:13.734999 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 1:107, ack 203, win 11, options [nop,nop,TS val 1565759968 ecr 3847736421], length 106
00:53:13.735335 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 203:285, ack 107, win 4318, options [nop,nop,TS val 3847736735 ecr 1565759968], length 82
00:53:13.735349 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 285:395, ack 107, win 4318, options [nop,nop,TS val 3847736735 ecr 1565759968], length 110
00:53:13.743211 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 285, win 11, options [nop,nop,TS val 1565759969 ecr 3847736735], length 0
00:53:13.745137 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 395, win 11, options [nop,nop,TS val 1565759969 ecr 3847736735], length 0
00:53:13.769173 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 107:189, ack 395, win 11, options [nop,nop,TS val 1565759971 ecr 3847736735], length 82
00:53:13.810989 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 189, win 4318, options [nop,nop,TS val 3847736810 ecr 1565759971], length 0
00:53:14.208814 ARP, Request who-has 192.168.0.78 tell _gateway, length 28
00:53:14.208816 ARP, Request who-has ESP_CC1C94.home tell ESP_CC1C94.home, length 28
00:53:14.238172 IP fazi.37872 > _gateway.domain: 26570+ PTR? 78.0.168.192.in-addr.arpa. (43)
00:53:14.239378 IP _gateway.domain > fazi.37872: 26570* 1/0/0 PTR 192.168.0.78. (69)
00:53:14.239811 IP fazi.60471 > _gateway.domain: 15215+ PTR? 69.0.168.192.in-addr.arpa. (43)
00:53:14.241356 IP _gateway.domain > fazi.60471: 15215* 1/0/0 PTR ESP_CC1C94.home. (72)
00:53:15.123357 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 395:726, ack 189, win 4318, options [nop,nop,TS val 3847738123 ecr 1565759971], length 331
00:53:15.123485 IP ESP_CC1C94.home.49154 > 255.255.255.255.6667: UDP, length 188
00:53:15.161033 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 726, win 11, options [nop,nop,TS val 1565760111 ecr 3847738123], length 0
00:53:15.168289 IP fazi.32961 > _gateway.domain: 17373+ PTR? 255.255.255.255.in-addr.arpa. (46)
00:53:15.174724 IP _gateway.domain > fazi.32961: 17373 NXDomain 0/1/0 (114)
00:53:15.222231 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 189:271, ack 726, win 11, options [nop,nop,TS val 1565760114 ecr 3847738123], length 82
00:53:15.222255 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 271, win 4318, options [nop,nop,TS val 3847738222 ecr 1565760114], length 0
00:53:15.685984 IP6 fazi.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
00:53:15.688106 IP fazi.37158 > _gateway.domain: 4735+ PTR? 2.0.0.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa. (90)
00:53:15.695130 IP _gateway.domain > fazi.37158: 4735 NXDomain 0/1/0 (154)
00:53:15.735907 IP6 fe80::724f:57ff:fe08:d937 > ff02::1:ff73:5e8b: ICMP6, neighbor solicitation, who has fazi, length 32
00:53:15.735942 IP6 fazi > fe80::724f:57ff:fe08:d937: ICMP6, neighbor advertisement, tgt is fazi, length 32
00:53:15.737603 IP6 fe80::724f:57ff:fe08:d937.32783 > fazi.dhcpv6-client: dhcp6 advertise
00:53:15.794788 IP fazi.45268 > _gateway.domain: 29051+ PTR? b.8.e.5.3.7.f.f.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa. (90)
00:53:15.863058 IP 25.206.252.198.in-addr.arpa.https > fazi.39658: Flags [P.], seq 2634862106:2634862167, ack 1902274916, win 61, options [nop,nop,TS val 462167904 ecr 2060156220], length 61
00:53:15.863306 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 726:820, ack 271, win 4318, options [nop,nop,TS val 3847738863 ecr 1565760114], length 94
00:53:15.870309 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 820, win 11, options [nop,nop,TS val 1565760181 ecr 3847738863], length 0
00:53:15.906154 IP _gateway.domain > fazi.45268: 29051 NXDomain 0/1/0 (154)
00:53:15.906508 IP fazi.48511 > _gateway.domain: 4265+ PTR? 7.3.9.d.8.0.e.f.f.f.7.5.f.4.2.7.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. (90)
00:53:15.939614 ARP, Request who-has ESP_1A1613.home tell ESP_1A1613.home, length 28
00:53:16.014731 IP fazi.49439 > _gateway.domain: 18588+ A? openvpn.mycompanynet.prv. (38)
00:53:16.014746 IP fazi.49439 > _gateway.domain: 34968+ AAAA? openvpn.mycompanynet.prv. (38)
00:53:16.077267 IP _gateway.domain > fazi.49439: 34968 NXDomain 0/1/0 (113)
00:53:16.079250 IP _gateway.domain > fazi.49439: 18588 NXDomain 0/1/0 (113)
00:53:16.079405 IP fazi.48417 > _gateway.domain: 49061+ A? openvpn.mycompanynet.prv.home. (43)
00:53:16.079412 IP fazi.48417 > _gateway.domain: 41435+ AAAA? openvpn.mycompanynet.prv.home. (43)
00:53:16.086066 IP _gateway.domain > fazi.48417: 49061 NXDomain 0/1/0 (118)
00:53:16.088103 IP _gateway.domain > fazi.48417: 41435 NXDomain 0/1/0 (118)
00:53:16.088591 IP fazi.58703 > _gateway.domain: 59012+ A? openvpn.mycompanynet.prv. (38)
00:53:16.088596 IP fazi.58703 > _gateway.domain: 15237+ AAAA? openvpn.mycompanynet.prv. (38)
00:53:16.094892 IP _gateway.domain > fazi.58703: 59012 NXDomain 0/1/0 (113)
00:53:16.096930 IP _gateway.domain > fazi.58703: 15237 NXDomain 0/1/0 (113)
00:53:16.097002 IP fazi.60397 > _gateway.domain: 15697+ A? openvpn.mycompanynet.prv.home. (43)
00:53:16.097006 IP fazi.60397 > _gateway.domain: 51055+ AAAA? openvpn.mycompanynet.prv.home. (43)
00:53:16.103888 IP _gateway.domain > fazi.60397: 15697 NXDomain 0/1/0 (118)
00:53:16.105968 IP _gateway.domain > fazi.60397: 51055 NXDomain 0/1/0 (118)
00:53:16.113839 IP _gateway > all-systems.mcast.net: igmp query v2
00:53:16.144384 ARP, Request who-has 192.168.0.78 tell _gateway, length 28
00:53:16.391424 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 820:941, ack 271, win 4318, options [nop,nop,TS val 3847739391 ecr 1565760181], length 121
00:53:16.484646 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 941, win 11, options [nop,nop,TS val 1565760243 ecr 3847739391], length 0
00:53:16.556010 IP ESP_1A1613.home.49154 > 255.255.255.255.6667: UDP, length 188
00:53:16.701907 IP fazi.47094 > _gateway.domain: 20428+ PTR? 25.206.252.198.in-addr.arpa. (45)
00:53:16.703177 IP _gateway.domain > fazi.47094: 20428 1/0/0 PTR 25.206.252.198.in-addr.arpa. (86)
00:53:16.703740 IP fazi.55508 > _gateway.domain: 19913+ PTR? 82.0.168.192.in-addr.arpa. (43)
00:53:16.705230 IP _gateway.domain > fazi.55508: 19913* 1/0/0 PTR ESP_1A1613.home. (72)
00:53:16.706033 IP fazi.53477 > _gateway.domain: 60857+ PTR? 1.0.0.224.in-addr.arpa. (40)
00:53:16.711016 IP _gateway.domain > fazi.53477: 60857 1/0/0 PTR all-systems.mcast.net. (75)
00:53:17.137669 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 941:1536, ack 271, win 4318, options [nop,nop,TS val 3847740137 ecr 1565760243], length 595
00:53:17.149392 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 1536, win 11, options [nop,nop,TS val 1565760309 ecr 3847740137], length 0
00:53:17.149399 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 1536:1657, ack 271, win 4318, options [nop,nop,TS val 3847740149 ecr 1565760309], length 121
00:53:17.152483 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 271:353, ack 1536, win 11, options [nop,nop,TS val 1565760310 ecr 3847740137], length 82
00:53:17.152487 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 353, win 4318, options [nop,nop,TS val 3847740152 ecr 1565760310], length 0
00:53:17.159864 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 353:435, ack 1657, win 11, options [nop,nop,TS val 1565760310 ecr 3847740149], length 82
00:53:17.159869 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 435, win 4318, options [nop,nop,TS val 3847740159 ecr 1565760310], length 0
00:53:17.161672 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 435:556, ack 1657, win 11, options [nop,nop,TS val 1565760310 ecr 3847740149], length 121
00:53:17.161676 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 556, win 4318, options [nop,nop,TS val 3847740161 ecr 1565760310], length 0
00:53:17.169630 ARP, Request who-has 192.168.0.78 tell _gateway, length 28
00:53:17.169712 IP6 fe80::724f:57ff:fe08:d937 > ip6-allnodes: ICMP6, router advertisement, length 32
00:53:17.173390 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 556:707, ack 1657, win 11, options [nop,nop,TS val 1565760312 ecr 3847740161], length 151
00:53:17.173393 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 707, win 4318, options [nop,nop,TS val 3847740173 ecr 1565760312], length 0
00:53:17.173397 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 707:820, ack 1657, win 11, options [nop,nop,TS val 1565760312 ecr 3847740161], length 113
00:53:17.173398 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 820, win 4318, options [nop,nop,TS val 3847740173 ecr 1565760312], length 0
00:53:17.173721 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 1657:1739, ack 820, win 4318, options [nop,nop,TS val 3847740173 ecr 1565760312], length 82
00:53:17.174918 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 1739:1889, ack 820, win 4318, options [nop,nop,TS val 3847740174 ecr 1565760312], length 150
00:53:17.175579 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 820:941, ack 1657, win 11, options [nop,nop,TS val 1565760312 ecr 3847740161], length 121
00:53:17.175584 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 941, win 4318, options [nop,nop,TS val 3847740175 ecr 1565760312], length 0
00:53:17.175705 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 1889:3420, ack 941, win 4318, options [nop,nop,TS val 3847740175 ecr 1565760312], length 1531
00:53:17.207788 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 3420:4170, ack 941, win 4318, options [nop,nop,TS val 3847740207 ecr 1565760312], length 750
00:53:17.296787 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 1889, win 11, options [nop,nop,TS val 1565760313 ecr 3847740173], length 0
00:53:17.296792 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 3420, win 11, options [nop,nop,TS val 1565760313 ecr 3847740175], length 0
00:53:17.296793 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 941:1023, ack 3420, win 11, options [nop,nop,TS val 1565760313 ecr 3847740175], length 82
00:53:17.296796 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 1023, win 4318, options [nop,nop,TS val 3847740296 ecr 1565760313], length 0
00:53:17.296801 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 1023:1144, ack 3420, win 11, options [nop,nop,TS val 1565760313 ecr 3847740175], length 121
00:53:17.296802 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 1144, win 4318, options [nop,nop,TS val 3847740296 ecr 1565760313], length 0
00:53:17.296803 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 1144:1226, ack 3420, win 11, options [nop,nop,TS val 1565760313 ecr 3847740175], length 82
00:53:17.296805 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 1226, win 4318, options [nop,nop,TS val 3847740296 ecr 1565760313], length 0
00:53:17.296806 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 1226:1308, ack 3420, win 11, options [nop,nop,TS val 1565760314 ecr 3847740175], length 82
00:53:17.296807 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 1308, win 4318, options [nop,nop,TS val 3847740296 ecr 1565760314], length 0
00:53:17.296807 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 1308:1455, ack 3420, win 11, options [nop,nop,TS val 1565760315 ecr 3847740175], length 147
00:53:17.296808 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 1455, win 4317, options [nop,nop,TS val 3847740296 ecr 1565760315], length 0
00:53:17.297197 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 1455:1602, ack 3420, win 11, options [nop,nop,TS val 1565760315 ecr 3847740175], length 147
00:53:17.297201 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 1602:1715, ack 3420, win 11, options [nop,nop,TS val 1565760315 ecr 3847740175], length 113
00:53:17.297202 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 1715:1836, ack 3420, win 11, options [nop,nop,TS val 1565760315 ecr 3847740175], length 121
00:53:17.297202 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 1836:1949, ack 3420, win 11, options [nop,nop,TS val 1565760315 ecr 3847740175], length 113
00:53:17.297203 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 1949:2062, ack 3420, win 11, options [nop,nop,TS val 1565760318 ecr 3847740175], length 113
00:53:17.297207 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 4170:4252, ack 1949, win 4314, options [nop,nop,TS val 3847740297 ecr 1565760315], length 82
00:53:17.297225 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 2062, win 4318, options [nop,nop,TS val 3847740297 ecr 1565760318], length 0
00:53:17.298466 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 4252:4980, ack 2062, win 4318, options [nop,nop,TS val 3847740298 ecr 1565760318], length 728
00:53:17.306030 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 4252, win 11, options [nop,nop,TS val 1565760325 ecr 3847740207], length 0
00:53:17.308015 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 4252, win 11, options [nop,nop,TS val 1565760325 ecr 3847740207], length 0
00:53:17.308016 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 4252, win 11, options [nop,nop,TS val 1565760325 ecr 3847740207], length 0
00:53:17.308017 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 2062:2156, ack 4980, win 11, options [nop,nop,TS val 1565760325 ecr 3847740298], length 94
00:53:17.308182 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 2156, win 4318, options [nop,nop,TS val 3847740308 ecr 1565760325], length 0
00:53:17.310362 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 2156:2238, ack 4980, win 11, options [nop,nop,TS val 1565760325 ecr 3847740298], length 82
00:53:17.310365 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 2238:2320, ack 4980, win 11, options [nop,nop,TS val 1565760325 ecr 3847740298], length 82
00:53:17.310366 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 2320:2402, ack 4980, win 11, options [nop,nop,TS val 1565760325 ecr 3847740298], length 82
00:53:17.310366 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 2402:2484, ack 4980, win 11, options [nop,nop,TS val 1565760325 ecr 3847740298], length 82
00:53:17.310366 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 2484:2605, ack 4980, win 11, options [nop,nop,TS val 1565760325 ecr 3847740298], length 121
00:53:17.310477 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 2605, win 4318, options [nop,nop,TS val 3847740310 ecr 1565760325], length 0
00:53:17.325898 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 2605:2753, ack 4980, win 11, options [nop,nop,TS val 1565760327 ecr 3847740310], length 148
00:53:17.325902 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 2753:2866, ack 4980, win 11, options [nop,nop,TS val 1565760327 ecr 3847740310], length 113
00:53:17.325994 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 2866, win 4318, options [nop,nop,TS val 3847740325 ecr 1565760327], length 0
00:53:17.326162 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 4980:5062, ack 2866, win 4318, options [nop,nop,TS val 3847740326 ecr 1565760327], length 82
00:53:17.326398 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 5062:5179, ack 2866, win 4318, options [nop,nop,TS val 3847740326 ecr 1565760327], length 117
00:53:17.326585 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 5179:5840, ack 2866, win 4318, options [nop,nop,TS val 3847740326 ecr 1565760327], length 661
00:53:17.327867 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 2866:2987, ack 4980, win 11, options [nop,nop,TS val 1565760327 ecr 3847740310], length 121
00:53:17.328065 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 5840:5961, ack 2987, win 4318, options [nop,nop,TS val 3847740327 ecr 1565760327], length 121
00:53:17.334370 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 5179, win 11, options [nop,nop,TS val 1565760328 ecr 3847740326], length 0
00:53:17.336351 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 5961, win 11, options [nop,nop,TS val 1565760328 ecr 3847740326], length 0
00:53:17.338307 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 2987:3069, ack 5961, win 11, options [nop,nop,TS val 1565760328 ecr 3847740326], length 82
00:53:17.338310 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 3069:3151, ack 5961, win 11, options [nop,nop,TS val 1565760328 ecr 3847740326], length 82
00:53:17.338402 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 3151, win 4318, options [nop,nop,TS val 3847740338 ecr 1565760328], length 0
00:53:17.353812 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 3151:3298, ack 5961, win 11, options [nop,nop,TS val 1565760330 ecr 3847740338], length 147
00:53:17.354306 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 5961:6078, ack 3298, win 4318, options [nop,nop,TS val 3847740354 ecr 1565760330], length 117
00:53:17.355910 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 3298:3411, ack 5961, win 11, options [nop,nop,TS val 1565760330 ecr 3847740338], length 113
00:53:17.355913 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 3411:3532, ack 5961, win 11, options [nop,nop,TS val 1565760330 ecr 3847740338], length 121
00:53:17.356005 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 3532, win 4318, options [nop,nop,TS val 3847740355 ecr 1565760330], length 0
00:53:17.356162 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 6078:6160, ack 3532, win 4318, options [nop,nop,TS val 3847740356 ecr 1565760330], length 82
00:53:17.356169 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 6160:6281, ack 3532, win 4318, options [nop,nop,TS val 3847740356 ecr 1565760330], length 121
00:53:17.363328 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 6160, win 11, options [nop,nop,TS val 1565760331 ecr 3847740354], length 0
00:53:17.366526 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 3532:3614, ack 6281, win 11, options [nop,nop,TS val 1565760331 ecr 3847740356], length 82
00:53:17.407660 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 3614, win 4318, options [nop,nop,TS val 3847740407 ecr 1565760331], length 0
00:53:17.578327 IP 192.168.0.2.47311 > 255.255.255.255.faximum: UDP, length 173
00:53:17.631264 IP fazi.44070 > _gateway.domain: 13538+ PTR? 2.0.168.192.in-addr.arpa. (42)
00:53:17.721893 IP _gateway.domain > fazi.44070: 13538* 1/0/0 PTR 192.168.0.2. (67)
00:53:17.884524 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 6281:6371, ack 3614, win 4318, options [nop,nop,TS val 3847740884 ecr 1565760331], length 90
00:53:17.886248 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 6371:6461, ack 3614, win 4318, options [nop,nop,TS val 3847740886 ecr 1565760331], length 90
00:53:17.893405 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 6461, win 11, options [nop,nop,TS val 1565760384 ecr 3847740884], length 0
00:53:18.202421 ARP, Request who-has 192.168.0.78 tell _gateway, length 28
00:53:18.570981 IP 25.206.252.198.in-addr.arpa.https > fazi.39660: Flags [P.], seq 269312235:269312296, ack 2356312325, win 61, options [nop,nop,TS val 462170688 ecr 2060159894], length 61
00:53:18.571260 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 6461:6555, ack 3614, win 4318, options [nop,nop,TS val 3847741571 ecr 1565760384], length 94
00:53:18.610562 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 6555, win 11, options [nop,nop,TS val 1565760456 ecr 3847741571], length 0
00:53:19.164704 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 6555:6676, ack 3614, win 4318, options [nop,nop,TS val 3847742164 ecr 1565760456], length 121
00:53:19.172104 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 6676, win 11, options [nop,nop,TS val 1565760512 ecr 3847742164], length 0
00:53:19.226453 ARP, Request who-has 192.168.0.78 tell _gateway, length 28
00:53:19.933583 IP ESP_CC1C94.home.49154 > 255.255.255.255.6667: UDP, length 188
00:53:20.143824 ARP, Request who-has 192.168.0.78 tell _gateway, length 28
00:53:20.240518 IP Host-003.home > 224.0.0.251: igmp v2 report 224.0.0.251
00:53:20.317900 IP fazi.47765 > _gateway.domain: 64157+ PTR? 251.0.0.224.in-addr.arpa. (42)
00:53:20.323791 IP _gateway.domain > fazi.47765: 64157 NXDomain 0/1/0 (99)
00:53:20.323894 IP fazi.55019 > _gateway.domain: 57260+ PTR? 5.0.168.192.in-addr.arpa. (42)
00:53:20.325461 IP _gateway.domain > fazi.55019: 57260* 1/0/0 PTR Host-003.home. (69)
00:53:20.660382 IP 192.168.0.2.47311 > 255.255.255.255.faximum: UDP, length 173
00:53:20.871066 IP6 fazi > fe80::724f:57ff:fe08:d937: ICMP6, neighbor solicitation, who has fe80::724f:57ff:fe08:d937, length 32
00:53:20.872698 IP6 fe80::724f:57ff:fe08:d937 > fazi: ICMP6, neighbor advertisement, tgt is fe80::724f:57ff:fe08:d937, length 24
00:53:21.111108 IP fazi.41498 > _gateway.domain: 26000+ A? openvpn.mycompanynet.prv. (38)
00:53:21.111118 IP fazi.41498 > _gateway.domain: 670+ AAAA? openvpn.mycompanynet.prv. (38)
00:53:21.117550 IP _gateway.domain > fazi.41498: 26000 NXDomain 0/1/0 (113)
00:53:21.119547 IP _gateway.domain > fazi.41498: 670 NXDomain 0/1/0 (113)
00:53:21.119660 IP fazi.54662 > _gateway.domain: 4419+ A? openvpn.mycompanynet.prv.home. (43)
00:53:21.119664 IP fazi.54662 > _gateway.domain: 31556+ AAAA? openvpn.mycompanynet.prv.home. (43)
00:53:21.124870 IP _gateway.domain > fazi.54662: 4419 NXDomain 0/1/0 (118)
00:53:21.127451 IP _gateway.domain > fazi.54662: 31556 NXDomain 0/1/0 (118)
00:53:21.127552 IP fazi.57158 > _gateway.domain: 30094+ A? openvpn.mycompanynet.prv. (38)
00:53:21.127557 IP fazi.57158 > _gateway.domain: 57741+ AAAA? openvpn.mycompanynet.prv. (38)
00:53:21.133177 IP _gateway.domain > fazi.57158: 30094 NXDomain 0/1/0 (113)
00:53:21.135137 IP _gateway.domain > fazi.57158: 57741 NXDomain 0/1/0 (113)
00:53:21.135167 IP fazi.41704 > _gateway.domain: 45603+ A? openvpn.mycompanynet.prv.home. (43)
00:53:21.135171 IP fazi.41704 > _gateway.domain: 9249+ AAAA? openvpn.mycompanynet.prv.home. (43)
00:53:21.140802 IP _gateway.domain > fazi.41704: 45603 NXDomain 0/1/0 (118)
00:53:21.142980 IP _gateway.domain > fazi.41704: 9249 NXDomain 0/1/0 (118)
00:53:21.164931 ARP, Request who-has 192.168.0.78 tell _gateway, length 28
00:53:21.562736 IP ESP_1A1613.home.49154 > 255.255.255.255.6667: UDP, length 188
00:53:22.196154 ARP, Request who-has 192.168.0.78 tell _gateway, length 28
00:53:22.825805 ARP, Request who-has fazi tell _gateway, length 28
00:53:22.825820 ARP, Reply fazi is-at 10:3d:1c:47:30:ab (oui Unknown), length 28
00:53:25.258213 ARP, Request who-has 192.168.0.78 tell _gateway, length 28
00:53:25.739816 IP 25.206.252.198.in-addr.arpa.https > fazi.39638: Flags [P.], seq 758499299:758499360, ack 1044402419, win 62, options [nop,nop,TS val 462177856 ecr 2060148143], length 61
00:53:25.740126 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 6676:6770, ack 3614, win 4318, options [nop,nop,TS val 3847748740 ecr 1565760512], length 94
00:53:25.747610 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 6770, win 11, options [nop,nop,TS val 1565761169 ecr 3847748740], length 0
00:53:25.873788 ARP, Request who-has ESP_1A1613.home tell ESP_1A1613.home, length 28
00:53:26.147691 IP fazi.39192 > _gateway.domain: 24904+ A? openvpn.mycompanynet.prv. (38)
00:53:26.147704 IP fazi.39192 > _gateway.domain: 6475+ AAAA? openvpn.mycompanynet.prv. (38)
00:53:26.153629 IP _gateway.domain > fazi.39192: 24904 NXDomain 0/1/0 (113)
00:53:26.155619 IP _gateway.domain > fazi.39192: 6475 NXDomain 0/1/0 (113)
00:53:26.155722 IP fazi.52015 > _gateway.domain: 10630+ A? openvpn.mycompanynet.prv.home. (43)
00:53:26.155726 IP fazi.52015 > _gateway.domain: 33921+ AAAA? openvpn.mycompanynet.prv.home. (43)
00:53:26.161407 IP _gateway.domain > fazi.52015: 10630 NXDomain 0/1/0 (118)
00:53:26.163423 IP _gateway.domain > fazi.52015: 33921 NXDomain 0/1/0 (118)
00:53:26.163507 IP fazi.51196 > _gateway.domain: 4105+ A? openvpn.mycompanynet.prv. (38)
00:53:26.163511 IP fazi.51196 > _gateway.domain: 60175+ AAAA? openvpn.mycompanynet.prv. (38)
00:53:26.170274 IP _gateway.domain > fazi.51196: 4105 NXDomain 0/1/0 (113)
00:53:26.172278 IP _gateway.domain > fazi.51196: 60175 NXDomain 0/1/0 (113)
00:53:26.172349 IP fazi.51728 > _gateway.domain: 32420+ A? openvpn.mycompanynet.prv.home. (43)
00:53:26.172352 IP fazi.51728 > _gateway.domain: 14011+ AAAA? openvpn.mycompanynet.prv.home. (43)
00:53:26.179003 IP _gateway.domain > fazi.51728: 32420 NXDomain 0/1/0 (118)
00:53:26.181018 IP _gateway.domain > fazi.51728: 14011 NXDomain 0/1/0 (118)
00:53:26.181019 ARP, Request who-has 192.168.0.78 tell _gateway, length 28
00:53:26.384584 IP6 fe80::724f:57ff:fe08:d937 > ip6-allnodes: ICMP6, router advertisement, length 32
00:53:26.417815 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 6770:6891, ack 3614, win 4318, options [nop,nop,TS val 3847749417 ecr 1565761169], length 121
00:53:26.418665 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 6891:6973, ack 3614, win 4318, options [nop,nop,TS val 3847749418 ecr 1565761169], length 82
00:53:26.424765 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 6891, win 11, options [nop,nop,TS val 1565761237 ecr 3847749417], length 0
00:53:26.426809 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 6973, win 11, options [nop,nop,TS val 1565761237 ecr 3847749418], length 0
00:53:26.428738 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 3614:3696, ack 6973, win 11, options [nop,nop,TS val 1565761237 ecr 3847749418], length 82
00:53:26.428742 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 3696, win 4318, options [nop,nop,TS val 3847749428 ecr 1565761237], length 0
00:53:26.599655 IP 192.168.0.2.47311 > 255.255.255.255.faximum: UDP, length 173
00:53:27.213901 ARP, Request who-has 192.168.0.78 tell _gateway, length 28
00:53:28.124604 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 6973:7043, ack 3696, win 4318, options [nop,nop,TS val 3847751124 ecr 1565761237], length 70
00:53:28.136441 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 3696:3766, ack 7043, win 11, options [nop,nop,TS val 1565761408 ecr 3847751124], length 70
00:53:28.136464 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 3766, win 4318, options [nop,nop,TS val 3847751136 ecr 1565761408], length 0
00:53:28.227836 ARP, Request who-has 192.168.0.78 tell _gateway, length 28
00:53:28.235326 IP 25.206.252.198.in-addr.arpa.https > fazi.39636: Flags [P.], seq 136085862:136085923, ack 522670305, win 61, options [nop,nop,TS val 462180352 ecr 2060150542], length 61
00:53:28.235572 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 7043:7137, ack 3766, win 4318, options [nop,nop,TS val 3847751235 ecr 1565761408], length 94
00:53:28.280979 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 7137, win 11, options [nop,nop,TS val 1565761423 ecr 3847751235], length 0
00:53:29.251793 ARP, Request who-has 192.168.0.78 tell _gateway, length 28
00:53:29.661701 IP 192.168.0.2.47311 > 255.255.255.255.faximum: UDP, length 173
00:53:29.733127 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 3766:3973, ack 7137, win 11, options [nop,nop,TS val 1565761568 ecr 3847751235], length 207
00:53:29.733164 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 3973, win 4318, options [nop,nop,TS val 3847752733 ecr 1565761568], length 0
00:53:29.733805 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 7137:7219, ack 3973, win 4318, options [nop,nop,TS val 3847752733 ecr 1565761568], length 82
00:53:29.741606 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 7219, win 11, options [nop,nop,TS val 1565761569 ecr 3847752733], length 0
00:53:29.755832 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 7219:7380, ack 3973, win 4318, options [nop,nop,TS val 3847752755 ecr 1565761569], length 161
00:53:29.762615 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 7380, win 11, options [nop,nop,TS val 1565761571 ecr 3847752755], length 0
00:53:29.768614 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 7380:7618, ack 3973, win 4318, options [nop,nop,TS val 3847752768 ecr 1565761571], length 238
00:53:29.775893 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 7618, win 11, options [nop,nop,TS val 1565761572 ecr 3847752768], length 0
00:53:29.778735 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 3973:4055, ack 7618, win 11, options [nop,nop,TS val 1565761572 ecr 3847752768], length 82
00:53:29.778739 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 4055, win 4318, options [nop,nop,TS val 3847752778 ecr 1565761572], length 0
00:53:29.831199 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 7618:7739, ack 4055, win 4318, options [nop,nop,TS val 3847752831 ecr 1565761572], length 121
00:53:29.866502 IP ESP_CC1C94.home.49154 > 255.255.255.255.6667: UDP, length 188
00:53:29.871513 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 7739, win 11, options [nop,nop,TS val 1565761582 ecr 3847752831], length 0
00:53:30.184573 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 4055:4262, ack 7739, win 11, options [nop,nop,TS val 1565761613 ecr 3847752831], length 207
00:53:30.184591 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 4262, win 4318, options [nop,nop,TS val 3847753184 ecr 1565761613], length 0
00:53:30.184920 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 7739:7821, ack 4262, win 4318, options [nop,nop,TS val 3847753184 ecr 1565761613], length 82
00:53:30.185877 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 7821:7982, ack 4262, win 4318, options [nop,nop,TS val 3847753185 ecr 1565761613], length 161
00:53:30.191813 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 7821, win 11, options [nop,nop,TS val 1565761614 ecr 3847753184], length 0
00:53:30.193814 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 7982, win 11, options [nop,nop,TS val 1565761614 ecr 3847753185], length 0
00:53:30.236988 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 4262:4344, ack 7982, win 11, options [nop,nop,TS val 1565761618 ecr 3847753185], length 82
00:53:30.236993 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 4344, win 4318, options [nop,nop,TS val 3847753236 ecr 1565761618], length 0
00:53:30.275848 ARP, Request who-has 192.168.0.78 tell _gateway, length 28
00:53:30.304634 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], seq 4344:5712, ack 7982, win 11, options [nop,nop,TS val 1565761625 ecr 3847753236], length 1368
00:53:30.304638 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 5712, win 4318, options [nop,nop,TS val 3847753304 ecr 1565761625], length 0
00:53:30.306677 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 5712:5774, ack 7982, win 11, options [nop,nop,TS val 1565761625 ecr 3847753236], length 62
00:53:30.306683 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 5774, win 4318, options [nop,nop,TS val 3847753306 ecr 1565761625], length 0
00:53:30.306688 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 5774:5903, ack 7982, win 11, options [nop,nop,TS val 1565761625 ecr 3847753236], length 129
00:53:30.306689 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 5903, win 4317, options [nop,nop,TS val 3847753306 ecr 1565761625], length 0
00:53:30.306937 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 7982:8064, ack 5903, win 4318, options [nop,nop,TS val 3847753306 ecr 1565761625], length 82
00:53:30.308578 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 8064:8146, ack 5903, win 4318, options [nop,nop,TS val 3847753308 ecr 1565761625], length 82
00:53:30.314649 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 8064, win 11, options [nop,nop,TS val 1565761626 ecr 3847753306], length 0
00:53:30.316694 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 8146, win 11, options [nop,nop,TS val 1565761626 ecr 3847753308], length 0
00:53:30.340197 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 8146:8384, ack 5903, win 4318, options [nop,nop,TS val 3847753340 ecr 1565761626], length 238
00:53:30.346836 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 8384, win 11, options [nop,nop,TS val 1565761629 ecr 3847753340], length 0
00:53:30.349642 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 5903:5985, ack 8384, win 11, options [nop,nop,TS val 1565761629 ecr 3847753340], length 82
00:53:30.390963 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 5985, win 4318, options [nop,nop,TS val 3847753390 ecr 1565761629], length 0
00:53:30.587523 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 5985:6175, ack 8384, win 11, options [nop,nop,TS val 1565761653 ecr 3847753390], length 190
00:53:30.587532 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 6175, win 4318, options [nop,nop,TS val 3847753587 ecr 1565761653], length 0
00:53:30.631094 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 8384:8466, ack 6175, win 4318, options [nop,nop,TS val 3847753630 ecr 1565761653], length 82
00:53:30.671057 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 8466, win 11, options [nop,nop,TS val 1565761662 ecr 3847753630], length 0
00:53:30.787833 IP6 fe80::724f:57ff:fe08:d937 > ip6-allnodes: ICMP6, router advertisement, length 32
00:53:31.186663 IP fazi.45950 > _gateway.domain: 51533+ A? openvpn.mycompanynet.prv. (38)
00:53:31.186676 IP fazi.45950 > _gateway.domain: 26190+ AAAA? openvpn.mycompanynet.prv. (38)
00:53:31.193971 IP _gateway.domain > fazi.45950: 51533 NXDomain 0/1/0 (113)
00:53:31.195651 IP _gateway.domain > fazi.45950: 26190 NXDomain 0/1/0 (113)
00:53:31.195708 IP fazi.36715 > _gateway.domain: 17611+ A? openvpn.mycompanynet.prv.home. (43)
00:53:31.195713 IP fazi.36715 > _gateway.domain: 39626+ AAAA? openvpn.mycompanynet.prv.home. (43)
00:53:31.198486 ARP, Request who-has 192.168.0.78 tell _gateway, length 28
00:53:31.204399 IP _gateway.domain > fazi.36715: 17611 NXDomain 0/1/0 (118)
00:53:31.206469 IP _gateway.domain > fazi.36715: 39626 NXDomain 0/1/0 (118)
00:53:31.206644 IP fazi.50283 > _gateway.domain: 50823+ A? openvpn.mycompanynet.prv. (38)
00:53:31.206649 IP fazi.50283 > _gateway.domain: 22401+ AAAA? openvpn.mycompanynet.prv. (38)
00:53:31.213625 IP _gateway.domain > fazi.50283: 50823 NXDomain 0/1/0 (113)
00:53:31.215254 IP _gateway.domain > fazi.50283: 22401 NXDomain 0/1/0 (113)
00:53:31.215306 IP fazi.59619 > _gateway.domain: 21328+ A? openvpn.mycompanynet.prv.home. (43)
00:53:31.215310 IP fazi.59619 > _gateway.domain: 13137+ AAAA? openvpn.mycompanynet.prv.home. (43)
00:53:31.222071 IP _gateway.domain > fazi.59619: 21328 NXDomain 0/1/0 (118)
00:53:31.223785 IP _gateway.domain > fazi.59619: 13137 NXDomain 0/1/0 (118)
00:53:31.607244 IP ESP_1A1613.home.49154 > 255.255.255.255.6667: UDP, length 188
00:53:32.221520 ARP, Request who-has 192.168.0.78 tell _gateway, length 28
00:53:32.612523 IP 192.168.0.2.47311 > 255.255.255.255.faximum: UDP, length 173
00:53:33.244539 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 8466:8548, ack 6175, win 4318, options [nop,nop,TS val 3847756244 ecr 1565761662], length 82
00:53:33.246408 ARP, Request who-has 192.168.0.78 tell _gateway, length 28
00:53:33.246424 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [P.], seq 8548:8630, ack 6175, win 4318, options [nop,nop,TS val 3847756246 ecr 1565761662], length 82
00:53:33.253774 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 8548, win 11, options [nop,nop,TS val 1565761920 ecr 3847756244], length 0
00:53:33.254830 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [.], ack 8630, win 11, options [nop,nop,TS val 1565761920 ecr 3847756246], length 0
00:53:33.256712 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 6175:6257, ack 8630, win 11, options [nop,nop,TS val 1565761920 ecr 3847756246], length 82
00:53:33.256721 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 6257, win 4318, options [nop,nop,TS val 3847756256 ecr 1565761920], length 0
00:53:33.419036 IP 25.225.218.91.in-addr.arpa.https > fazi.46070: Flags [P.], seq 6257:6339, ack 8630, win 11, options [nop,nop,TS val 1565761936 ecr 3847756256], length 82
00:53:33.419048 IP fazi.46070 > 25.225.218.91.in-addr.arpa.https: Flags [.], ack 6339, win 4318, options [nop,nop,TS val 3847756418 ecr 1565761936], length 0

Can you help me?
Thank you

chavo11 · 18 January 2022 11:50

After extended troubleshooting it seems that network manager fails to update route tables correctly with this setup. Also it maybe leaves some trace in the route tables that then impede CLI vpns to function properly.
So the solution is: don’t try with network manager first and use only openforticlient + openvpn from CLI.
In this way I was then able to connect easily.

system · 21 January 2022 01:50

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.