Matthew Sayler <[EMAIL PROTECTED]> wrote:
> freeRADIUS has been working great for me, but I have been receiving the
> following error messages in my radius.log file:
>
> Wed Jul 25 11:40:04 2001 : Error: Malformed RADIUS packet from host 206.126.224.
> 211: received 467 octets, packet size says 215
That's pretty definitely an error. The data received is larger than
the packet!
UDP packets should only come one at a time. If more than one UDP
packet is read at a time, then I don't know what's going on.
> The NASs are USR TotalControl 1000 boxen. These messages only seem to come
> from our old (non-HyperARC) TC's. As far as I can tell, the messages have
> been appearing ever since we started using freeRADIUS.
Hmm... and other RADIUS servers don't see them? If you use tcpdump,
do the packets look reasonable?
> They only appear on my accounting server, which is also being used
> by several other NASs. I am using the 7-25-2001 snapshot, though
> the problem appears to have been occuring with earlier snapshots as
> well.
Use tcpdump, and see if the packets on the wire are reasonable.
> The code in lib/radius.c looks pretty sane--it's just parsing out the
> packets and doing some verification on the fields. I'm not sure how I
> can tell whether or not the packets are indeed munged (and if they are
> if it would be OK just to ignore the extra info?).. Any ideas? Anyone
> seen this before?
I've *never* seen this before. I don't know how to even begin
tracking down the problem.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html