lots of "bad packet ID (may be a replay)" warnings

zmi

I get a lot of these:

Jul 12 07:45:09 gate14 openvpn[24300]: PID_ERR large diff [73] [SSL-7] [0000000000___________0000000000000000000000000000000000000000000] 0:887636 0:887563 t=1342071909[0] r=[0,64,15,246,1] sl=[1,64,64,528]
Jul 12 07:45:09 gate14 openvpn[24300]: Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #887563 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings

From the man page, I'd understand I should increase "n" of the

--replay-window n [t]

option from 64 to something bigger. Could that solve the warnings, or does this just hide another problem?

Mimiko

Use --mute-replay-warnings in your config to hide this messages. This usually occur on bad routes when packets are resend again even the packed was received fine.