Error map

NO_PROPOSAL_CHOSEN (IPsec/IKE) Networking: IKE: received NO_PROPOSAL_CHOSEN — IPsec peers can't agree on encryption, hash or DH group

Networking · layer 2, Network

Open the full error page →

Centre: this error. First ring: errors it is linked with (7). Outer ring: what those are linked with. Colours show the layer of a request each error belongs to. Click any dot to re-centre the map on it; hover to follow its connections. The centre dot opens the error page.

NO_PROPOSAL_CHOSEN (IPsec/IKE) — Networking: IKE: received NO_PROPOSAL_CHOSEN — IPsec peers can't agree on encryption, hash or DH group (Networking)NO_PROPOSAL…sslv3 alert handshake failure — OpenSSL: error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure (SSL alert number 40) (SSL / TLS)sslv3 alert handsha…VPN connected but internal subnets unreachable — Networking: VPN is connected but I can't reach the internal network — missing routes, split tunnel or overlapping subnets (Networking)VPN connected but i…WireGuard: Handshake did not complete after 5 seconds — Networking: Handshake for peer did not complete after 5 seconds, retrying (try 2) — WireGuard tunnel never establishes (Networking)WireGuard: Handshak…Internal hostnames fail on VPN (split DNS / systemd-resolved) — Networking: VPN connected but internal names like db.corp.local don't resolve — split DNS / 127.0.0.53 stub resolver not using the VPN DNS (Networking)Internal hostnames …arp -a shows (incomplete) — Networking: `arp -n` shows (incomplete) / Destination Host Unreachable — no ARP reply from the next hop (Networking)arp -a shows (incom…Connections hang on large transfers (PMTU black hole) — Networking: SSH/HTTPS connects but hangs on large data — path MTU discovery black hole (Networking)Connections hang on…Your Remote Desktop Services session has ended (network problem) — Networking: Your Remote Desktop Services session has ended. Possibly the network connection was lost / Remote Desktop disconnected, error code 0x904 (Networking)Your Remote Desktop…cURL error 35 — cURL error 35: OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to host:443 (PHP)cURL error 35SSL_ERROR_NO_CYPHER_OVERLAP — Firefox: Secure Connection Failed — SSL_ERROR_NO_CYPHER_OVERLAP (no common cipher) (Browser)SSL_ERROR_NO_CYPHER…unable to get local issuer certificate — OpenSSL: error:num=20:unable to get local issuer certificate / SSL: CERTIFICATE_VERIFY_FAILED (SSL / TLS)unable to get local…Reply from 192.168.1.1: Destination host unreachable — Networking: ping — Destination Host Unreachable / Destination net unreachable (ICMP type 3) (Networking)Reply from 192.168.…Wrong subnet mask: hosts can't reach each other — Networking: Two hosts on one LAN can't talk — subnet mask or network address mismatch (Networking)Wrong subnet mask: …OSPF neighbor stuck in EXSTART/EXCHANGE — Networking: %OSPF-5-ADJCHG: Nbr 10.0.0.2 from EXSTART to DOWN — OSPF neighbor stuck in EXSTART/EXCHANGE (MTU mismatch) (Networking)OSPF neighbor stuck…4-way handshake timeout / Incorrect password — Networking: wlan0: WPA: 4-way handshake failed - pre-shared key may be incorrect / WRONG_KEY (Networking)4-way handshake tim…Frag needed and DF set (ICMP type 3 code 4) — Networking: ping: local error: message too long, mtu=1500 / Packet needs to be fragmented but DF set (Networking)Frag needed and DF …UDP RcvbufErrors / packet receive errors — Networking: netstat -su: packet receive errors, receive buffer errors — UDP datagrams dropped by a full socket buffer (Networking)UDP RcvbufErrors / …Temporary failure in name resolution — ping: google.com: Temporary failure in name resolution (Linux)Temporary failure i…Public IP/domain unreachable from inside the LAN (NAT hairpin) — Networking: Server reachable from the internet but not from inside the LAN via its public IP — NAT loopback / hairpin NAT not working (Networking)Public IP/domain un…IPv6 enabled but broken: slow connections / Happy Eyeballs — Networking: Sites load slowly or hang for seconds — broken IPv6 (AAAA resolves, IPv6 route missing) falling back to IPv4 (Networking)IPv6 enabled but br…Network cable unplugged / NO-CARRIER — Networking: Network cable unplugged / `ip link` shows NO-CARRIER state DOWN / Ethernet: Network cable unplugged (Networking)Network cable unplu…No Wi-Fi adapter found / Wi-Fi option missing — Networking: No Wi-Fi networks found — the Wi-Fi adapter is missing, disabled or its driver failed (Networking)No Wi-Fi adapter fo…Wi-Fi keeps disconnecting (weak signal, -80 dBm) — Networking: Wi-Fi keeps disconnecting / signal -80 dBm / wlan0: deauthenticating by local choice (reason=3) (Networking)Wi-Fi keeps disconn…High TCP retransmissions / packet loss — Networking: netstat -s: segments retransmitted / Wireshark: TCP Retransmission, TCP Dup ACK — packet loss on the path (Networking)High TCP retransmis…Cannot assign requested address (EADDRNOTAVAIL) — Networking: connect: Cannot assign requested address — ephemeral port range exhausted by TIME_WAIT connections (Networking)Cannot assign reque…Possible SYN flooding on port 80. Sending cookies. — Networking: TCP: request_sock_TCP: Possible SYN flooding on port 80. Sending cookies. Check SNMP counters. (Networking)Possible SYN floodi…0x80070035 — 0x80070035: The network path was not found (System error 53) (Windows)0x80070035Windows: Default gateway is not available — Networking: Windows: Default gateway is not available / Diagnose Connection Problems: DHCP not enabled (Networking)Windows: Default ga…Idle connections silently dropped by firewall/NAT — Networking: Connection works, then fails after being idle — firewall/NAT idle timeout dropped the TCP session (use keepalive) (Networking)Idle connections si…

Directly related (7)

sslv3 alert handshake failureSSL / TLS

OpenSSL: error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure (SSL alert number 40)

The server aborted the handshake with alert 40 — no acceptable parameters (cipher, signature algorithm, client certificate or SNI…

VPN connected but internal subnets unreachableNetworking

Networking: VPN is connected but I can't reach the internal network — missing routes, split tunnel or overlapping subnets

The tunnel is up, but traffic for the office/VPC subnets isn't sent through it or comes back the wrong way.

WireGuard: Handshake did not complete after 5 secondsNetworking

Networking: Handshake for peer did not complete after 5 seconds, retrying (try 2) — WireGuard tunnel never establishes

The WireGuard peers can't complete the cryptographic handshake, so no traffic flows.

Internal hostnames fail on VPN (split DNS / systemd-resolved)Networking

Networking: VPN connected but internal names like db.corp.local don't resolve — split DNS / 127.0.0.53 stub resolver not using the VPN DNS

The VPN works by IP, but internal hostnames fail because queries still go to your normal DNS server.

arp -a shows (incomplete)Networking

Networking: `arp -n` shows (incomplete) / Destination Host Unreachable — no ARP reply from the next hop

The machine asked "who has this IP?" and nobody on the local network answered.

Connections hang on large transfers (PMTU black hole)Networking

Networking: SSH/HTTPS connects but hangs on large data — path MTU discovery black hole

Small packets pass but full-size ones vanish, so logins work and then transfers or page loads stall.

Your Remote Desktop Services session has ended (network problem)Networking

Networking: Your Remote Desktop Services session has ended. Possibly the network connection was lost / Remote Desktop disconnected, error code 0x904

An established Remote Desktop session dropped because the network under it stalled or the session was reset.

Two steps away (21)

cURL error 35PHP

cURL error 35: OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to host:443

The TLS handshake failed — protocol/cipher mismatch, a proxy interfering, or the server closed the connection.

SSL_ERROR_NO_CYPHER_OVERLAPBrowser

Firefox: Secure Connection Failed — SSL_ERROR_NO_CYPHER_OVERLAP (no common cipher)

Firefox and the server share no TLS cipher suite, so the secure handshake cannot even start.

unable to get local issuer certificateSSL / TLS

OpenSSL: error:num=20:unable to get local issuer certificate / SSL: CERTIFICATE_VERIFY_FAILED

The client could not build a chain from the server's certificate to a CA it trusts — the issuer is missing locally or the server…

Reply from 192.168.1.1: Destination host unreachableNetworking

Networking: ping — Destination Host Unreachable / Destination net unreachable (ICMP type 3)

A router (or your own PC) tells you it has no way to deliver the packet to that address.

Wrong subnet mask: hosts can't reach each otherNetworking

Networking: Two hosts on one LAN can't talk — subnet mask or network address mismatch

The hosts disagree about which addresses are local, so one tries to route traffic that should go straight across the LAN.

OSPF neighbor stuck in EXSTART/EXCHANGENetworking

Networking: %OSPF-5-ADJCHG: Nbr 10.0.0.2 from EXSTART to DOWN — OSPF neighbor stuck in EXSTART/EXCHANGE (MTU mismatch)

Two OSPF routers see each other but never finish exchanging databases, cycling between EXSTART and DOWN.

4-way handshake timeout / Incorrect passwordNetworking

Networking: wlan0: WPA: 4-way handshake failed - pre-shared key may be incorrect / WRONG_KEY

The Wi-Fi association started but key negotiation failed, almost always a wrong password.

Frag needed and DF set (ICMP type 3 code 4)Networking

Networking: ping: local error: message too long, mtu=1500 / Packet needs to be fragmented but DF set

A packet is larger than the path MTU and is marked "don't fragment", so a router discards it.

UDP RcvbufErrors / packet receive errorsNetworking

Networking: netstat -su: packet receive errors, receive buffer errors — UDP datagrams dropped by a full socket buffer

UDP packets arrive faster than the application reads them, so the kernel throws the extras away.

Temporary failure in name resolutionLinux

ping: google.com: Temporary failure in name resolution

The Linux host can’t resolve domain names — no working DNS server is configured or reachable.

Public IP/domain unreachable from inside the LAN (NAT hairpin)Networking

Networking: Server reachable from the internet but not from inside the LAN via its public IP — NAT loopback / hairpin NAT not working

Devices on your own network can't use the router's public address to reach a server that is also on that network.

IPv6 enabled but broken: slow connections / Happy EyeballsNetworking

Networking: Sites load slowly or hang for seconds — broken IPv6 (AAAA resolves, IPv6 route missing) falling back to IPv4

The client prefers IPv6, but the IPv6 path is broken, so every connection waits for a timeout before using IPv4.

Network cable unplugged / NO-CARRIERNetworking

Networking: Network cable unplugged / `ip link` shows NO-CARRIER state DOWN / Ethernet: Network cable unplugged

The network card sees no electrical link, so nothing above it (IP, DNS, browser) can work.

No Wi-Fi adapter found / Wi-Fi option missingNetworking

Networking: No Wi-Fi networks found — the Wi-Fi adapter is missing, disabled or its driver failed

The operating system doesn't see a working wireless adapter, so no networks can be listed.

Wi-Fi keeps disconnecting (weak signal, -80 dBm)Networking

Networking: Wi-Fi keeps disconnecting / signal -80 dBm / wlan0: deauthenticating by local choice (reason=3)

The wireless link is too weak or too noisy to hold, so the client drops and rejoins repeatedly.

High TCP retransmissions / packet lossNetworking

Networking: netstat -s: segments retransmitted / Wireshark: TCP Retransmission, TCP Dup ACK — packet loss on the path

Packets are being lost, so TCP resends them and throughput collapses.

Cannot assign requested address (EADDRNOTAVAIL)Networking

Networking: connect: Cannot assign requested address — ephemeral port range exhausted by TIME_WAIT connections

The machine ran out of local ports for new outgoing connections to the same destination.

Possible SYN flooding on port 80. Sending cookies.Networking

Networking: TCP: request_sock_TCP: Possible SYN flooding on port 80. Sending cookies. Check SNMP counters.

The server's pending-connection queue filled, so the kernel switched to SYN cookies to survive.

0x80070035Windows

0x80070035: The network path was not found (System error 53)

Windows can’t reach the shared folder — name resolution, SMB settings, firewall or network discovery is preventing it.

Windows: Default gateway is not availableNetworking

Networking: Windows: Default gateway is not available / Diagnose Connection Problems: DHCP not enabled

The PC can't reach its router, so it has no path out of the local network.

Idle connections silently dropped by firewall/NATNetworking

Networking: Connection works, then fails after being idle — firewall/NAT idle timeout dropped the TCP session (use keepalive)

A connection that sat idle was forgotten by a firewall or NAT device, so the next packet gets reset or vanishes.