etan
Hello
I noticed this when pinging google.com, what could be a reason for difference in TTL values?
When I ping with vpn turned off I get always same TTL value.
Is somebody hijacking vpn ?
Reply from 173.194.32.2: bytes=32 time=176ms TTL=51
Reply from 173.194.32.2: bytes=32 time=175ms TTL=49
Reply from 173.194.32.2: bytes=32 time=177ms TTL=51
Reply from 173.194.32.2: bytes=32 time=176ms TTL=51
Reply from 173.194.32.2: bytes=32 time=176ms TTL=51
Reply from 173.194.32.2: bytes=32 time=176ms TTL=51
Reply from 173.194.32.2: bytes=32 time=177ms TTL=49
janjust
it could be that the route from the VPN server to google.com is redundant, and that sometimes it uses one route, sometimes the other; try a 'traceroute' to see if this claim is true 🙂
etan
it is tricky to check with traceroute but that was actually my point: if routes are different then how to tell nobody puts finger on my vpn :-)
janjust
an openvpn connection is pretty hard to crack - that's the whole idea of using a VPN ;-)
do pings to the VPN server itself have different TTL values? try pinging the VPN server IP similar to like you pinged 8.8.8.8.
etan
Right now I am not able to recreate, will keep trying.
Could be of course reason as you said or just public vpn provider flaw but judging from number of router reboots or calls received from so called "anti-fraud" departments (some of these scammers have even nerve to question me: "are you using vpn?) the openvpn should be upgraded for multilink like feature like similar in cellular technology or something.
For example you might ggle "It appears you are trying to signup through a proxy, VPN or public computer".
And consider some vpn providers at the same time claim: "stealth protocol we use will not be recognized as any standard VPN protocol" ... yet they already know you use it LOL obviously 1st step to break encryption would be to find out if one uses it.
