OpenVPN uses different port for ACK traffic

nickp

Hi,

When using wireshark to intercept the traffic between my demo i noticed that ACK traffic uses a random port ( >1024 ) as source.
Is there a specific reason for?

- Nick

TinCanTech

If you are claiming that Openvpn is somehow not RFC "xyz" compliant then please provide details.

nickp

Ha TinCanTech,

when i look at the traffic i see the following pattern:

client:src 1194 -> server:dst 60718 (data)
server:src 1194 -> client:src 60718 (ACK)
client:src 60718 -> server:dst 1194 (data)
server:src 60718 -> client:src 1194 (ACK)
And so on.

I'm just curious why this is.

TinCanTech

nickp wrote i see the following pattern:

client:src 1194 -> server:dst 60718 (data)

You have transcribed this incorrectly.

nickp wrote server:src 1194 -> client:src 60718 (ACK)

ok.

nickp wrote client:src 60718 -> server:dst 1194 (data)

ok.

nickp wrote server:src 60718 -> client:src 1194 (ACK)

You have transcribed this incorrectly.

nickp wrote I'm just curious why this is

I suggest you learn how TCP/IP works.

nickp

I do only know that ftp has this behavior, and that it is very uncommon to have.

TinCanTech

You are mistaken .. no TCP/IP protocol behaves in the manner which you are trying to describe.

nickp

why does openvpn do it than. (not bashing on RFC stuf, only curiosity)

TinCanTech

Openvpn does not behave in the manner which you are trying to describe.