[ previous ] [ next ] [ threads ]
 
 From:  Ron Rosson <ron at oneinsane dot net>
 To:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall] PPTP not connecting
 Date:  Thu, 8 Jul 2004 09:47:42 -0700
>I have attatched 3 files:
>    1. tcpdump from powerbook of the PPTP connection attempt
>    2. the log from OSX's PPTP client
>    3. the log entries from m0n0wall
>    

I was afraid of that

Here is the tcpdump:
tcpdump://en0@localhost;options=host 67.119.235.38
09:14:48.973222 IP 192.168.0.34.51266 >
adsl-67-119-235-38.dsl.sndg02.pacbell.net.pptp: S 524594204:524594204(0)
win 65535 <mss 1360,nop,wscale 0,nop,nop,timestamp 4105863718 0>
09:14:49.105364 IP adsl-67-119-235-38.dsl.sndg02.pacbell.net.pptp >
192.168.0.34.51266: S 1779339452:1779339452(0) ack 524594205 win 57344
<mss 1452,nop,wscale 0,nop,nop,timestamp 112028 4105863718>
09:14:49.105502 IP 192.168.0.34.51266 >
adsl-67-119-235-38.dsl.sndg02.pacbell.net.pptp: . ack 1 win 65535
<nop,nop,timestamp 4105863718 112028>
09:14:49.105616 IP 192.168.0.34.51266 >
adsl-67-119-235-38.dsl.sndg02.pacbell.net.pptp: P 1:157(156) ack 1 win
65535 <nop,nop,timestamp 4105863718 112028>: pptp CTRL_MSGTYPE=SCCRQ
PROTO_VER(1.0) FRAME_CAP(A) BEARER_CAP(A) MAX_CHAN(0) FIRM_REV(0)
HOSTNAME() VENDOR()
09:14:49.256121 IP adsl-67-119-235-38.dsl.sndg02.pacbell.net.pptp >
192.168.0.34.51266: P 1:157(156) ack 157 win 57964 <nop,nop,timestamp
112063 4105863718>: pptp CTRL_MSGTYPE=SCCRP PROTO_VER(1.0)
RESULT_CODE(1) ERR_CODE(0) FRAME_CAP(S) BEARER_CAP(DA) MAX_CHAN(0)
FIRM_REV(257) HOSTNAME(m0n0wall.oneinsane.net) VENDOR(FreeBSD mpd-3.18)
09:14:49.256350 IP 192.168.0.34.51266 >
adsl-67-119-235-38.dsl.sndg02.pacbell.net.pptp: P 157:325(168) ack 157
win 65535 <nop,nop,timestamp 4105863718 112063>: pptp CTRL_MSGTYPE=OCRQ
CALL_ID(1782) CALL_SER_NUM(0) MIN_BPS(300) MAX_BPS(100000000)
BEARER_TYPE(Any) FRAME_TYPE(E) RECV_WIN(64) PROC_DELAY(0)
PHONE_NO_LEN(0) PHONE_NO() SUB_ADDR()
09:14:49.450692 IP adsl-67-119-235-38.dsl.sndg02.pacbell.net.pptp >
192.168.0.34.51266: P 157:189(32) ack 325 win 57964 <nop,nop,timestamp
112108 4105863718>: pptp CTRL_MSGTYPE=OCRP CALL_ID(31907)
PEER_CALL_ID(1782) RESULT_CODE(1) ERR_CODE(0) CAUSE_CODE(0)
CONN_SPEED(64000) RECV_WIN(16) PROC_DELAY(1) PHY_CHAN_ID(0)
09:14:49.450933 IP 192.168.0.34.51266 >
adsl-67-119-235-38.dsl.sndg02.pacbell.net.pptp: P 325:349(24) ack 189
win 65535 <nop,nop,timestamp 4105863719 112108>: pptp CTRL_MSGTYPE=SLI
PEER_CALL_ID(31907) SEND_ACCM(0xffffffff) RECV_ACCM(0xffffffff)
09:14:49.510490 IP 192.168.0.34 >
adsl-67-119-235-38.dsl.sndg02.pacbell.net: call 31907 seq 1
gre-ppp-payload
09:14:49.703078 IP adsl-67-119-235-38.dsl.sndg02.pacbell.net >
192.168.0.34: call 1782 ack 1 no-payload
09:14:49.705280 IP adsl-67-119-235-38.dsl.sndg02.pacbell.net >
192.168.0.34: call 1782 seq 1 gre-ppp-payload
09:14:49.712767 IP adsl-67-119-235-38.dsl.sndg02.pacbell.net.pptp >
192.168.0.34.51266: . ack 349 win 57964 <nop,nop,timestamp 112172
4105863719>
09:14:49.850159 IP 192.168.0.34 >
adsl-67-119-235-38.dsl.sndg02.pacbell.net: call 31907 ack 1 no-payload
09:14:51.534536 IP adsl-67-119-235-38.dsl.sndg02.pacbell.net >
192.168.0.34: call 1782 seq 2 gre-ppp-payload
09:14:51.539925 IP 192.168.0.34 >
adsl-67-119-235-38.dsl.sndg02.pacbell.net: call 31907 seq 2 ack 2
gre-ppp-payload
09:14:52.510639 IP 192.168.0.34 >
adsl-67-119-235-38.dsl.sndg02.pacbell.net: call 31907 seq 3
gre-ppp-payload
09:14:53.536108 IP adsl-67-119-235-38.dsl.sndg02.pacbell.net >
192.168.0.34: call 1782 seq 3 gre-ppp-payload
09:14:53.537911 IP 192.168.0.34 >
adsl-67-119-235-38.dsl.sndg02.pacbell.net: call 31907 seq 4 ack 3
gre-ppp-payload
09:14:55.510809 IP 192.168.0.34 >
adsl-67-119-235-38.dsl.sndg02.pacbell.net: call 31907 seq 5
gre-ppp-payload
09:14:55.553090 IP adsl-67-119-235-38.dsl.sndg02.pacbell.net >
192.168.0.34: call 1782 seq 4 gre-ppp-payload
09:14:55.553348 IP 192.168.0.34 >
adsl-67-119-235-38.dsl.sndg02.pacbell.net: call 31907 seq 6 ack 4
gre-ppp-payload
09:14:57.564105 IP adsl-67-119-235-38.dsl.sndg02.pacbell.net >
192.168.0.34: call 1782 seq 5 gre-ppp-payload
09:14:57.564369 IP 192.168.0.34 >
adsl-67-119-235-38.dsl.sndg02.pacbell.net: call 31907 seq 7 ack 5
gre-ppp-payload
09:14:58.511006 IP 192.168.0.34 >
adsl-67-119-235-38.dsl.sndg02.pacbell.net: call 31907 seq 8
gre-ppp-payload
09:14:59.634057 IP adsl-67-119-235-38.dsl.sndg02.pacbell.net >
192.168.0.34: call 1782 seq 6 gre-ppp-payload
09:14:59.634318 IP 192.168.0.34 >
adsl-67-119-235-38.dsl.sndg02.pacbell.net: call 31907 seq 9 ack 6
gre-ppp-payload
09:15:01.511164 IP 192.168.0.34 >
adsl-67-119-235-38.dsl.sndg02.pacbell.net: call 31907 seq 10
gre-ppp-payload
09:15:01.647310 IP adsl-67-119-235-38.dsl.sndg02.pacbell.net >
192.168.0.34: call 1782 seq 7 gre-ppp-payload
09:15:01.647572 IP 192.168.0.34 >
adsl-67-119-235-38.dsl.sndg02.pacbell.net: call 31907 seq 11 ack 7
gre-ppp-payload
09:15:03.659960 IP adsl-67-119-235-38.dsl.sndg02.pacbell.net >
192.168.0.34: call 1782 seq 8 gre-ppp-payload
09:15:03.660198 IP 192.168.0.34 >
adsl-67-119-235-38.dsl.sndg02.pacbell.net: call 31907 seq 12 ack 8
gre-ppp-payload
09:15:04.511324 IP 192.168.0.34 >
adsl-67-119-235-38.dsl.sndg02.pacbell.net: call 31907 seq 13
gre-ppp-payload
09:15:05.702193 IP adsl-67-119-235-38.dsl.sndg02.pacbell.net >
192.168.0.34: call 1782 seq 9 gre-ppp-payload
09:15:05.702434 IP 192.168.0.34 >
adsl-67-119-235-38.dsl.sndg02.pacbell.net: call 31907 seq 14 ack 9
gre-ppp-payload
09:15:07.511530 IP 192.168.0.34 >
adsl-67-119-235-38.dsl.sndg02.pacbell.net: call 31907 seq 15
gre-ppp-payload
09:15:07.669973 IP adsl-67-119-235-38.dsl.sndg02.pacbell.net >
192.168.0.34: call 1782 seq 10 gre-ppp-payload
09:15:07.670231 IP 192.168.0.34 >
adsl-67-119-235-38.dsl.sndg02.pacbell.net: call 31907 seq 16 ack 10
gre-ppp-payload
09:15:09.716496 IP adsl-67-119-235-38.dsl.sndg02.pacbell.net.pptp >
192.168.0.34.51266: P 189:205(16) ack 349 win 57964 <nop,nop,timestamp
117171 4105863719>: pptp CTRL_MSGTYPE=StopCCRQ REASON(3)
09:15:09.723201 IP adsl-67-119-235-38.dsl.sndg02.pacbell.net.pptp >
192.168.0.34.51266: P 205:353(148) ack 349 win 57964 <nop,nop,timestamp
117171 4105863719>: pptp CTRL_MSGTYPE=CDN CALL_ID(31907) RESULT_CODE(3)
ERR_CODE(0) CAUSE_CODE(0) CALL_STATS()
09:15:09.844448 IP 192.168.0.34.51266 >
adsl-67-119-235-38.dsl.sndg02.pacbell.net.pptp: F 349:349(0) ack 353 win
65535 <nop,nop,timestamp 4105863760 117171>
09:15:10.037090 IP adsl-67-119-235-38.dsl.sndg02.pacbell.net.pptp >
192.168.0.34.51266: . ack 350 win 57964 <nop,nop,timestamp 117244
4105863760>
09:15:10.039827 IP adsl-67-119-235-38.dsl.sndg02.pacbell.net.pptp >
192.168.0.34.51266: F 353:353(0) ack 350 win 57964 <nop,nop,timestamp
117246 4105863760>
09:15:10.039935 IP 192.168.0.34.51266 >
adsl-67-119-235-38.dsl.sndg02.pacbell.net.pptp: . ack 354 win 65535
<nop,nop,timestamp 4105863760 117246>


Here is the OSX PPTP:

Thu Jul  8 08:47:14 2004 : PPTP connecting to server
'oneinsanedotnet.mine.nu' (67.119.235.38)...
Thu Jul  8 08:47:14 2004 : PPTP connection established.
Thu Jul  8 08:47:14 2004 : Using interface ppp0
Thu Jul  8 08:47:14 2004 : Connect: ppp0 <--> socket[34:17]
Thu Jul  8 08:47:34 2004 : PPTP hangup
Thu Jul  8 08:47:34 2004 : Connection terminated.
Thu Jul  8 08:47:34 2004 : PPTP disconnecting...
Thu Jul  8 08:47:34 2004 : PPTP disconnected
Thu Jul  8 09:14:48 2004 : PPTP connecting to server
'oneinsanedotnet.mine.nu' (67.119.235.38)...
Thu Jul  8 09:14:49 2004 : PPTP connection established.
Thu Jul  8 09:14:49 2004 : Using interface ppp0
Thu Jul  8 09:14:49 2004 : Connect: ppp0 <--> socket[34:17]
Thu Jul  8 09:15:09 2004 : PPTP hangup
Thu Jul  8 09:15:09 2004 : Connection terminated.
Thu Jul  8 09:15:09 2004 : PPTP disconnecting...
Thu Jul  8 09:15:09 2004 : PPTP disconnected


and here is the m0n0wall log:

   Jul 8 09:22:39 mpd: MRU 1500                                                                     
                    
   Jul 8 09:22:39 mpd: MAGICNUM 4b4135ab                                                            
                    
   Jul 8 09:22:39 mpd: AUTHPROTO CHAP MSOFTv2                                                       
                    
   Jul 8 09:22:39 mpd: MP MRRU 1600                                                                 
                    
   Jul 8 09:22:39 mpd: MP SHORTSEQ                                                                  
                   
   Jul 8 09:22:39 mpd: ENDPOINTDISC [802.1] 00 05 5d ee 22 57                                       
                    
   Jul 8 09:22:41 mpd: [pptpc0] LCP: SendConfigReq #20                                              
                    
   Jul 8 09:22:41 mpd: ACFCOMP                                                                      
                    
   Jul 8 09:22:41 mpd: PROTOCOMP                                                                    
                    
   Jul 8 09:22:41 mpd: MRU 1500                                                                     
                    
   Jul 8 09:22:41 mpd: MAGICNUM 4b4135ab                                                            
                    
   Jul 8 09:22:41 mpd: AUTHPROTO CHAP MSOFTv2                                                       
                    
   Jul 8 09:22:41 mpd: MP MRRU 1600                                                                 
                    
   Jul 8 09:22:41 mpd: MP SHORTSEQ                                                                  
                   
   Jul 8 09:22:41 mpd: ENDPOINTDISC [802.1] 00 05 5d ee 22 57                                       
                    
   Jul 8 09:22:43 mpd: [pptpc0] LCP: state change Req-Sent --> Stopped                              
                    
   Jul 8 09:22:43 mpd: [pptpc0] LCP: LayerFinish                                                    
                    
   Jul 8 09:22:43 mpd: [pptpc0] LCP: parameter negotiation failed                                   
                   
   Jul 8 09:22:43 mpd: [pptpc0] LCP: LayerFinish                                                    
                    
   Jul 8 09:22:43 mpd: [pptpc0] device: CLOSE event in state UP                                     
                   
   Jul 8 09:22:43 mpd: pptp0-0: clearing call                                                       
                    
   Jul 8 09:22:43 mpd: pptp0-0: killing channel                                                     
                    
   Jul 8 09:22:43 mpd: [pptpc0] PPTP call terminated                                                
                   
   Jul 8 09:22:43 mpd: [pptpc0] IFACE: Close event                                                  
                    
   Jul 8 09:22:43 mpd: [pptpc0] IPCP: Close event                                                   
                    
   Jul 8 09:22:43 mpd: [pptpc0] IPCP: state change Starting --> Initial                             
                    
   Jul 8 09:22:43 mpd: [pptpc0] IPCP: LayerFinish                                                   
                    
   Jul 8 09:22:43 mpd: [pptpc0] IFACE: Close event                                                  
                    
   Jul 8 09:22:43 mpd: pptp0: closing connection with 69.3.14.138:51353                             
                   
   Jul 8 09:22:43 mpd: [pptpc0] IFACE: Close event                                                  
                    
   Jul 8 09:22:43 mpd: [pptpc0] device is now in state CLOSING                                      
                   
   Jul 8 09:22:43 mpd: [pptpc0] bundle: CLOSE event in state OPENED                                 
                   
   Jul 8 09:22:43 mpd: [pptpc0] closing link "pptpc0"...                                            
                    
   Jul 8 09:22:43 mpd: [pptpc0] device: CLOSE event in state CLOSING                                
                   
   Jul 8 09:22:43 mpd: [pptpc0] device is now in state CLOSING                                      
                    
   Jul 8 09:22:43 mpd: [pptpc0] link: CLOSE event                                                   
                    
   Jul 8 09:22:43 mpd: [pptpc0] LCP: Close event                                                    
                    
   Jul 8 09:22:43 mpd: [pptpc0] LCP: state change Stopped --> Closed                                
                   
   Jul 8 09:22:43 mpd: [pptpc0] device: DOWN event in state CLOSING                                 
                    
   Jul 8 09:22:43 mpd: [pptpc0] device is now in state DOWN                                         
                    
   Jul 8 09:22:43 mpd: [pptpc0] link: DOWN event                                                    
                   
   Jul 8 09:22:43 mpd: [pptpc0] LCP: Down event                                                     
                    
   Jul 8 09:22:43 mpd: [pptpc0] LCP: state change Closed --> Initial                                
                 
   Jul 8 09:22:43 mpd: [pptpc0] LCP: phase shift ESTABLISH --> DEAD                                 
                    
   Jul 8 09:22:43 mpd: [pptpc0] device: DOWN event in state DOWN                                    
                    
   Jul 8 09:22:43 mpd: [pptpc0] device is now in state DOWN                                         
                    
   Jul 8 09:22:43 mpd: [pptpc0] link: DOWN event                                                    
                    
   Jul 8 09:22:43 mpd: [pptpc0] LCP: Down event                                                     
                    
   Jul 8 09:22:44 mpd: pptp0: ctrl connection closed by peer                                        
                    
   Jul 8 09:22:44 mpd: pptp0: killing connection with 69.3.14.138:51353                             
                 
--
Ron Rosson
ron at oneinsane dot net