[TelstraClear] TelstraClear messing with SSL?

Sharesies | MightyApe | GoodSync | Backblaze backup

Welcome Guest.

You haven't logged in yet. If you don't have an account you can register now.

Forums › One New Zealand (including Vodafone, WxC, Farmside) › [TelstraClear] TelstraClear messing with SSL?

freitasm

BDFL - Memuneh
76381 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#114680 27-Feb-2013 12:38

I have been using a SSTP connection to our Geekzone servers lately and noticed that it works really well over mobile data (Telecom 3G and LTE, 2degrees 3G) with SSTP connection staying up for hours.

On TelstraClear cable the same connection with the same target server gets disconnected every couple of minutes, as soon as traffic starts.

Any ideas? Any way to trace this?

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

1 | 2

BDFL - Memuneh
76381 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#771104 27-Feb-2013 15:30

I spent most of this morning connected to Telecom LTE in town and had no problem accesing the SSTP VPN server, with no disconnections.

Back at home on TelstraClear cable and the SSTP VPN connection drops as soon as any traffic goes through it. I have connected directly to the modem to rule out a router configuration problem, but still the same.

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

TrendMicro

Best TrendMicro deals for antivirus and malware protection(affiliate link).

deadlyllama

1221 posts

Uber Geek

Trusted

#771109 27-Feb-2013 15:37

Have you tcpdumped/wiresharked both ends, and observed the disconnect?

freitasm

BDFL - Memuneh
76381 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#771111 27-Feb-2013 15:38

Nope.

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

deadlyllama

1221 posts

Uber Geek

Trusted

#771115 27-Feb-2013 15:46

Try it, then. You can filter all the crap in wireshark down by specifying just the IP of the SSTP server. You want to look at what's sent/recieved around the time of the disconnect, in particular if there are packets sent at one end that don't show up at the other.

freitasm

BDFL - Memuneh
76381 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#771121 27-Feb-2013 15:53

Ok, ran Wireshark on my side and got this so far (click for larger version):

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

Kraven

710 posts

Ultimate Geek

#771126 27-Feb-2013 16:06

Are you seeing any events in the event log on the server/client ends around the time of the disconnects? Is it possible to test SSTP over a different port (other than 80/443) to rule out any transparent proxy weirdness?

freitasm

BDFL - Memuneh
76381 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#771129 27-Feb-2013 16:12

No error in either machine. Client shows RASMAN entry:

"CoID={385424BA-71C7-457E-B9D2-8A5FCDFA4EC8}: The connection to VPN Connection to Geekzone Servers made by user Administrator using device VPN0-1 was disconnected."

Which is expected, and nothing on the server side.

Can't test on another port because the idea is to use SSTP which goes over port 443 and wouldn't require changes in the server side hardware firewall.

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

gstarkey

78 posts

Master Geek

#771132 27-Feb-2013 16:19

The wireshark screen shot shows no traffic going the other way, ( ie from 202.175.128.168) very odd

freitasm

BDFL - Memuneh
76381 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#771133 27-Feb-2013 16:22

Probably because it was filtered one way only... There was certainly some traffic - ping /t running in the background and that was fine, until I fired up a SQL Studio session and tried a query and that instantly got the session terminated (and no it's not when using SQL Studio only, it happens sometimes browsing the server or a shared folder).

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

deadlyllama

1221 posts

Uber Geek

Trusted

#771452 28-Feb-2013 09:09

freitasm: Ok, ran Wireshark on my side and got this so far (click for larger version):

Loads of retransmitted TCP... nothing coming back. Either the packets aren't making the way to the other side, OR the replies aren't making their way back. The only way you can determine which it is, is by wiresharking the other end.

Other question: can you post a screenshot scrolling up, showing the last few packets coming from 202.175.128.168.

Also have you tried doing this with a different router at the client end, or bypassing the router entirely and plugging your PC into the cable modem?

freitasm

BDFL - Memuneh
76381 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#771454 28-Feb-2013 09:10

The other end is the Datacom datacenter. SSTP works fine on any other network connecting to the server but TelstraClear. Yes, tried with my laptop connected directly to the cable modem...

The screnshot show one direction only because it's filtered...

I will get another trace from both sides later.

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

deadlyllama

1221 posts

Uber Geek

Trusted

#771466 28-Feb-2013 09:20

freitasm: The other end is the Datacom datacenter. SSTP works fine on any other network connecting to the server but TelstraClear. Yes, tried with my laptop connected directly to the cable modem...

The screnshot show one direction only because it's filtered...

I will get another trace from both sides later.

Can you give us a screenshot showing both directions (maybe filter based on host and port)?

freitasm

BDFL - Memuneh
76381 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#771477 28-Feb-2013 09:29

Here is a screenshot with traffic both ways just before disconnection.

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

freitasm

BDFL - Memuneh
76381 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#771602 28-Feb-2013 11:29

These are two traces collected from both sides:

Client side
Server side

Can't see anything strange here...

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

Rubicon

29 posts

Geek

#771659 28-Feb-2013 12:50

It looks as though your server has stopped sending ACK packets to the client. This leads to the client resetting the connection due to an assumed transmission failure.

You may want to check that the sequence numbers of packets sent by the client match those received by the server, and there are no missing numbers in the sequence.

1 | 2

News and reviews »

New Air Traffic Management Platform and Resilient Buildings a Milestone for Airways
Posted 6-Dec-2023 05:00

Logitech G Launches New Flagship Console Wireless Gaming Headset Astro A50 X
Posted 5-Dec-2023 21:00

NordVPN Helps Users Protect Themselves From Vulnerable Apps
Posted 5-Dec-2023 14:27

First-of-its-Kind Flight Trials Integrate Uncrewed Aircraft Into Controlled Airspace
Posted 5-Dec-2023 13:59

Prodigi Technology Services Announces Strategic Acquisition of Conex
Posted 4-Dec-2023 09:33

Samsung Announces Galaxy AI
Posted 28-Nov-2023 14:48

Epson Launches EH-LS650 Ultra Short Throw Smart Streaming Laser Projector
Posted 28-Nov-2023 14:38

Fitbit Charge 6 ReviewÂ
Posted 27-Nov-2023 16:21

Cisco Launches New Research Highlighting Gap in Preparedness for AI
Posted 23-Nov-2023 15:50

Seagate Takes Block Storage System to New Heights Reaching 2.5 PB
Posted 23-Nov-2023 15:45

Seagate Nytro 4350 NVMe SSD Delivers Consistent Application Performance and High QoS to Data Centers
Posted 23-Nov-2023 15:38

Amazon Fire TV Stick 4k Max (2nd Generation) Review
Posted 14-Nov-2023 16:17

Over half of New Zealand adults surveyed concerned about AI shopping scams
Posted 3-Nov-2023 10:42

Super Mario Bros. Wonder Launches on Nintendo Switch
Posted 24-Oct-2023 10:56

Google Releases Nest WiFi Pro in New Zealand
Posted 24-Oct-2023 10:18

Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.

Updates »

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

GoodSync is the easiest file sync and backup for Windows and Mac

RSS feeds: Main feed; Forums feed

Site features: Geekzone BI dashboard; Geekzone Badges

Affiliate links: Mighty Ape; Sharesies

Site Information: Subscribe to Geekzone; Privacy Statement; Forum Usage Guidelines (FUG); Advertising; Trademark and copyright

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.