Matthew Sayler <[EMAIL PROTECTED]> wrote:
> freeRADIUS has been working great for me, but I have been receiving the 
> following error messages in my radius.log file:
> 
> Wed Jul 25 11:40:04 2001 : Error: Malformed RADIUS packet from host 206.126.224.
> 211: received 467 octets, packet size says 215

  That's pretty definitely an error.  The data received is larger than
the packet!

  UDP packets should only come one at a time.  If more than one UDP
packet is read at a time, then I don't know what's going on.

> The NASs are USR TotalControl 1000 boxen.  These messages only seem to come
> from our old (non-HyperARC) TC's.  As far as I can tell, the messages have
> been appearing ever since we started using freeRADIUS.

  Hmm... and other RADIUS servers don't see them?  If you use tcpdump,
do the packets look reasonable?

>  They only appear on my accounting server, which is also being used
> by several other NASs.  I am using the 7-25-2001 snapshot, though
> the problem appears to have been occuring with earlier snapshots as
> well.

  Use tcpdump, and see if the packets on the wire are reasonable.
 
> The code in lib/radius.c looks pretty sane--it's just parsing out the
> packets and doing some verification on the fields.  I'm not sure how I
> can tell whether or not the packets are indeed munged (and if they are
> if it would be OK just to ignore the extra info?)..  Any ideas?  Anyone
> seen this before?

  I've *never* seen this before.  I don't know how to even begin
tracking down the problem.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to