Losing connection with Unknown DTLS packet

[Daniel Lenski]

On Mon, Nov 28, 2016 at 12:59 PM, Stuart Luppescu <slu at ccsr.uchicago.edu> wrote:
> Yeah, if only I could reproduce it. It generally only happens at night
> when I'm not using the computer, but it's still connected. (Last week I
> was doing some very, very long analyses that had to run over night, and
> I had to leave the VPN connected. I lost all that work when the VPN
> disconnected and had to do it all over again. I should have done it in
> a screen. Grrr.) I generally leave it running all the time, but I don't
> think I've seen it cut off during the day when I'm using it. I could
> set up Wireshark but I wonder if I have enough disk space to capture
> all the packets until it fails.

Something like this should work:
https://ask.wireshark.org/questions/5838/rolling-capture-for-a-weeks-long-event

Combine that with a filter to only keep traffic to/from the gateway
(e.g. dumpcap -f 'host cvpn.uchicago.edu' -i eth0) and you should have
a manageable capture size.

Dan