Hi, I have an OpenVPN server on internal network and two clients (in routing mode). On one of the clients I have a very high traffic usage and I would like to detect if something is configured wrong. Which regards the network everything is fine between the server and the clients. On the server side I have a router which runs pfSense. Traffic generated by the first client is like [b]5GB[/b] and the second one only [b]180MB[/b]! I tried tcpdump on the router to see if I can detect something and I observed a lot of these all the time: " pfSense.mpl > 192.168.1.16: ICMP redirect 192.168.2.50 to host 192.168.1.220, lenght 36 " *pfSense.mpl -router from server side *192.168.2.50 -a workstation from the openvpn client which is generating high traffic *192.168.1.220 -server IP address on internal network What is wrong? or maybe everything is fine?

[b]--verb[/b] 4 it's already setup on the server and on the clients sides. I checked the log files and everything looks normal. Also only one user is connected in our network, too This [i]" pfSense.mpl > 192.168.1.16: ICMP redirect 192.168.2.50 to host 192.168.1.220, lenght 36 "[/i] happens in every second, and maybe this generates this high traffic. Sadly don't know how to deal with it.

High traffic on one of my clients

zsolty_szasz

Hi, I have an OpenVPN server on internal network and two clients (in routing mode). On one of the clients I have a very high traffic usage and I would like to detect if something is configured wrong. Which regards the network everything is fine between the server and the clients.

On the server side I have a router which runs pfSense. Traffic generated by the first client is like 5GB and the second one only 180MB!

I tried tcpdump on the router to see if I can detect something and I observed a lot of these all the time:
" pfSense.mpl > 192.168.1.16: ICMP redirect 192.168.2.50 to host 192.168.1.220, lenght 36 "
*pfSense.mpl -router from server side
*192.168.2.50 -a workstation from the openvpn client which is generating high traffic
*192.168.1.220 -server IP address on internal network

What is wrong? or maybe everything is fine?

Traffic

Set --verb 4 in your server and client configs
and then check the logs for errors ..

Also, ask your client if they use the VPN a lot ..

zsolty_szasz

--verb 4 it's already setup on the server and on the clients sides. I checked the log files and everything looks normal.
Also only one user is connected in our network, too

This " pfSense.mpl > 192.168.1.16: ICMP redirect 192.168.2.50 to host 192.168.1.220, lenght 36 " happens in every second, and maybe this generates this high traffic.
Sadly don't know how to deal with it.

Traffic

I suggest: googling "ICMP redirect" ..
perhaps this will help you understand what your network is trying to do ..