Created
March 28, 2017 14:54
-
-
Save Katafalkas/37f49d54adec0b1f4c90a4af7bcbce3a to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| *Tunnelblick: OS X 10.12.3; Tunnelblick 3.7.0 (build 4790) | |
| 2017-03-28 17:34:07 *Tunnelblick: Attempting connection with foo@bar using shadow copy; Set nameserver = 769; monitoring connection | |
| 2017-03-28 17:34:07 *Tunnelblick: openvpnstart start [email protected] 1338 769 0 1 0 1065264 -ptADGNWradsgnw 2.3.14-openssl-1.0.2k | |
| 2017-03-28 17:34:07 *Tunnelblick: openvpnstart log: | |
| OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line): | |
| /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.14-openssl-1.0.2k/openvpn | |
| --daemon | |
| --log | |
| /Library/Application Support/Tunnelblick/Logs/-SUsers-S123-SLibrary-SApplication Support-STunnelblick-SConfigurations-Sfoo@bar.tblk-SContents-SResources-Sconfig.ovpn.769_0_1_0_1065264.1338.openvpn.log | |
| --cd | |
| /Library/Application Support/Tunnelblick/Users/123/123@123/Contents/Resources | |
| --verb | |
| 3 | |
| --config | |
| /Library/Application Support/Tunnelblick/Users/123/123@123/Contents/Resources/config.ovpn | |
| --verb | |
| 3 | |
| --cd | |
| /Library/Application Support/Tunnelblick/Users/123/123@123/Contents/Resources | |
| --management | |
| 127.0.0.1 | |
| 1338 | |
| --management-query-passwords | |
| --management-hold | |
| --script-security | |
| 2 | |
| --up | |
| /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw | |
| --down | |
| /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw | |
| 2017-03-28 17:34:07 *Tunnelblick: openvpnstart starting OpenVPN | |
| 2017-03-28 17:34:07 *Tunnelblick: Established communication with OpenVPN | |
| 2017-03-28 17:34:07 OpenVPN 2.3.14 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [PKCS11] [MH] [IPv6] built on Jan 28 2017 | |
| 2017-03-28 17:34:07 library versions: OpenSSL 1.0.2k 26 Jan 2017, LZO 2.09 | |
| 2017-03-28 17:34:07 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:1338 | |
| 2017-03-28 17:34:07 Need hold release from management interface, waiting... | |
| 2017-03-28 17:34:07 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:1338 | |
| 2017-03-28 17:34:07 MANAGEMENT: CMD 'pid' | |
| 2017-03-28 17:34:07 MANAGEMENT: CMD 'state on' | |
| 2017-03-28 17:34:07 MANAGEMENT: CMD 'state' | |
| 2017-03-28 17:34:07 MANAGEMENT: CMD 'bytecount 1' | |
| 2017-03-28 17:34:07 MANAGEMENT: CMD 'hold release' | |
| 2017-03-28 17:34:07 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts | |
| 2017-03-28 17:34:07 Socket Buffers: R=[196724->196724] S=[9216->9216] | |
| 2017-03-28 17:34:07 MANAGEMENT: >STATE:1490711647,RESOLVE,,, | |
| 2017-03-28 17:34:07 UDPv4 link local: [undef] | |
| 2017-03-28 17:34:07 UDPv4 link remote: [AF_INET]52.212.66.65:1194 | |
| 2017-03-28 17:34:07 MANAGEMENT: >STATE:1490711647,WAIT,,, | |
| 2017-03-28 17:34:07 MANAGEMENT: >STATE:1490711647,AUTH,,, | |
| 2017-03-28 17:34:07 TLS: Initial packet from [AF_INET]52.212.66.65:1194, sid=77977624 62a67dde | |
| 2017-03-28 17:34:08 VERIFY OK: depth=1, CN=RootCA, C=IS, L=11, O=123, OU=Root | |
| 2017-03-28 17:34:08 VERIFY OK: nsCertType=SERVER | |
| 2017-03-28 17:34:08 VERIFY OK: depth=0, CN=SuperRouter, C=IS, L=Wilno, O=123, OU=server | |
| 2017-03-28 17:34:08 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key | |
| 2017-03-28 17:34:08 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC). | |
| 2017-03-28 17:34:08 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication | |
| 2017-03-28 17:34:08 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key | |
| 2017-03-28 17:34:08 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC). | |
| 2017-03-28 17:34:08 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication | |
| 2017-03-28 17:34:08 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA | |
| 2017-03-28 17:34:08 [SuperRouter] Peer Connection Initiated with [AF_INET]52.212.66.65:1194 | |
| 2017-03-28 17:34:09 MANAGEMENT: >STATE:1490711649,GET_CONFIG,,, | |
| 2017-03-28 17:34:10 SENT CONTROL [SuperRouter]: 'PUSH_REQUEST' (status=1) | |
| 2017-03-28 17:34:10 PUSH: Received control message: 'PUSH_REPLY,route 172.31.0.0 255.255.0.0,dhcp-option DNS 10.8.0.1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.26 10.8.0.25' | |
| 2017-03-28 17:34:10 OPTIONS IMPORT: timers and/or timeouts modified | |
| 2017-03-28 17:34:10 OPTIONS IMPORT: --ifconfig/up options modified | |
| 2017-03-28 17:34:10 OPTIONS IMPORT: route options modified | |
| 2017-03-28 17:34:10 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified | |
| 2017-03-28 17:34:10 Opening utun (connect(AF_SYS_CONTROL)): Resource busy | |
| 2017-03-28 17:34:10 Opened utun device utun1 | |
| 2017-03-28 17:34:10 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 | |
| 2017-03-28 17:34:10 MANAGEMENT: >STATE:1490711650,ASSIGN_IP,,10.8.0.26, | |
| 2017-03-28 17:34:10 /sbin/ifconfig utun1 delete | |
| ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address | |
| 2017-03-28 17:34:10 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure | |
| 2017-03-28 17:34:10 /sbin/ifconfig utun1 10.8.0.26 10.8.0.25 mtu 1500 netmask 255.255.255.255 up | |
| 2017-03-28 17:34:10 /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw utun1 1500 1542 10.8.0.26 10.8.0.25 init | |
| ********************************************** | |
| Start of output from client.up.tunnelblick.sh | |
| Retrieved from OpenVPN: name server(s) [ 10.8.0.1 8.8.8.8 8.8.4.4 ], search domain(s) [ ] and SMB server(s) [ ] and using default domain name [ openvpn ] | |
| Not aggregating ServerAddresses because running on OS X 10.6 or higher | |
| Setting search domains to 'openvpn' because running under OS X 10.6 or higher and the search domains were not set manually and 'Prepend domain name to search domains' was not selected | |
| Saved the DNS and SMB configurations so they can be restored | |
| Changed DNS ServerAddresses setting from '192.168.102.254' to '10.8.0.1 8.8.8.8 8.8.4.4' | |
| Changed DNS SearchDomains setting from '' to 'openvpn' | |
| Changed DNS DomainName setting from '' to 'openvpn' | |
| Did not change SMB NetBIOSName setting of '' | |
| Did not change SMB Workgroup setting of '' | |
| Did not change SMB WINSAddresses setting of '' | |
| DNS servers '10.8.0.1 8.8.8.8 8.8.4.4' will be used for DNS queries when the VPN is active | |
| NOTE: The DNS servers include one or more free public DNS servers known to Tunnelblick and one or more DNS servers not known to Tunnelblick. If used, the DNS servers not known to Tunnelblick may cause DNS queries to fail or be intercepted or falsified even if they are directed through the VPN. Specify only known public DNS servers or DNS servers located on the VPN network to avoid such problems. | |
| Flushed the DNS cache via dscacheutil | |
| /usr/sbin/discoveryutil not present. Not flushing the DNS cache via discoveryutil | |
| Notified mDNSResponder that the DNS cache was flushed | |
| Setting up to monitor system configuration with process-network-changes | |
| End of output from client.up.tunnelblick.sh | |
| ********************************************** | |
| 2017-03-28 17:34:14 *Tunnelblick: No 'connected.sh' script to execute | |
| 2017-03-28 17:34:14 MANAGEMENT: >STATE:1490711654,ADD_ROUTES,,, | |
| 2017-03-28 17:34:14 /sbin/route add -net 172.31.0.0 10.8.0.25 255.255.0.0 | |
| add net 172.31.0.0: gateway 10.8.0.25 | |
| 2017-03-28 17:34:14 /sbin/route add -net 10.8.0.1 10.8.0.25 255.255.255.255 | |
| add net 10.8.0.1: gateway 10.8.0.25 | |
| 2017-03-28 17:34:14 Initialization Sequence Completed | |
| 2017-03-28 17:34:14 MANAGEMENT: >STATE:1490711654,CONNECTED,SUCCESS,10.8.0.26,52.212.66.65 | |
| 2017-03-28 17:34:19 *Tunnelblick process-network-changes: A system configuration change was ignored | |
| 2017-03-28 17:34:19 *Tunnelblick: This computer's apparent public IP address (x.x.x.x) was unchanged after the connection was made |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment