svr4 is the cistron and radius2 is a freeradius. I generated these using
radtest.
the payloads look pretty identical to my untrained eye.
-j
> At 04:17 PM 10/30/2001 -0600, jason wrote:
> >But the packets are not *exactly* identical, though the part i truncated
was
> >identical. The portion I attatched to my last mailing had differences,
> >which due to my limited knowledge of how the radius packet is formatted,
I
> >am unable to understand.
>
> there is a 'vector' that is calculated on per-client basis.
>
> >I'm perfectly willing to believe that is in fact the hiperarc's that are
at
> >fault somehow, but I need some information of what is going on. Whether
the
> >fault be with the hyperarc or the radius server.
>
> Try a recent version of tcpdump that will display the attributes that are
> being sent. I don't read radius attributes in hex yet ( though I'm closer
> than I'd like ).
>
> -Chris
>
17:54:14.300709 radius1.egix.net.32773 > radius2.egix.net.1645: rad-access-req 63 [id
205] Attr[ User{[EMAIL PROTECTED]} Pass NAS_ipaddr{255.255.255.255} NAS_port_id{5} ] (DF)
0x0000 4500 005b 0000 4000 4011 e6aa d183 d86f E..[..@[email protected]
0x0010 d183 d870 8005 066d 0047 37d1 01cd 003f ...p...m.G7....?
0x0020 0abf 8497 069b 4055 ade5 33fa 8f34 427b [EMAIL PROTECTED]{
0x0030 0110 726f 646e 6579 4069 6569 2e6e 6574 [EMAIL PROTECTED]
0x0040 0212 d3dd 0499 fa73 3280 3ec3 e054 eb5a .......s2.>..T.Z
0x0050 483c 0406 ffff ffff 5703 35 H<......W.5
17:54:14.310617 radius2.egix.net.1645 > radius1.egix.net.32773: rad-access-accept 103
[id 205] Attr[ Service_type{#519} Framed_proto{#268} Framed_mtu{1500}
Framed_routing{#13} Framed_compress{#264} Framed_ipaddr{rodney.dip.iei.net}
Framed_ipnet{255.255.255.255} Framed_route{209.131.201.8/29 209.131.199.97 1}
Idle_timeout{00 secs} ] (DF)
0x0000 4500 0083 0000 4000 4011 e682 d183 d870 E.....@[email protected]
0x0010 d183 d86f 066d 8005 006f 7f3f 02cd 0067 ...o.m...o.?...g
0x0020 c3f9 9e6d 07ee e5d4 8f90 ce50 280c 84e3 ...m.......P(...
0x0030 0606 0000 0002 0706 0000 0001 0c06 0000 ................
0x0040 05dc 0a06 0000 0000 0d06 0000 0001 0806 ................
0x0050 d183 c761 0906 ffff ffff 1623 3230 392e ...a.......#209.
0x0060 3133 312e 3230 312e 382f 3239 2032 3039 131.201.8/29.209
0x0070 2e31 3331 2e31 3939 2e39 3720 311c 0600 .131.199.97.1...
0x0080 0000 00 ...
17:54:19.300390 arp who-has radius2.egix.net tell radius1.egix.net
0x0000 0001 0800 0604 0001 00b0 d068 6a23 d183 ...........hj#..
0x0010 d86f 0000 0000 0000 d183 d870 .o.........p
17:54:19.300469 arp reply radius2.egix.net is-at 0:b0:d0:49:74:80
0x0000 0001 0800 0604 0002 00b0 d049 7480 d183 ...........It...
0x0010 d870 00b0 d068 6a23 d183 d86f 0000 0000 .p...hj#...o....
0x0020 0000 0000 0000 0000 0000 0000 0000 ..............
17:45:35.915675 radius1.egix.net.32772 > svr4.iei.net.1645: rad-access-req 63 [id
145] Attr[ User{[EMAIL PROTECTED]} Pass NAS_ipaddr{255.255.255.255} NAS_port_id{5} ] (DF)
0x0000 4500 005b 0000 4000 4011 e650 d183 d86f E..[..@[email protected]
0x0010 d183 d8ca 8004 066d 0047 54a8 0191 003f .......m.GT....?
0x0020 e908 b62b d722 8b1c c62f 573c c590 e881 ...+.".../W<....
0x0030 0110 726f 646e 6579 4069 6569 2e6e 6574 [EMAIL PROTECTED]
0x0040 0212 1c69 17c2 3451 2321 6d1a 9723 2ee9 ...i..4Q#!m..#..
0x0050 3945 0406 ffff ffff 5703 35 9E......W.5
17:45:35.922344 svr4.iei.net.1645 > radius1.egix.net.32772: rad-access-accept 103 [id
145] Attr[ Service_type{#519} Framed_proto{#268} Framed_mtu{1500} Framed_routing{#13}
Framed_compress{#264} Framed_ipaddr{rodney.dip.iei.net} Framed_ipnet{255.255.255.255}
Framed_route{209.131.201.8/29 209.131.199.97 1} Idle_timeout{00 secs} ]
0x0000 4500 0083 212d 0000 4011 04fc d183 d8ca E...!-..@.......
0x0010 d183 d86f 066d 8004 006f 4b09 0291 0067 ...o.m...oK....g
0x0020 0498 49e5 d087 0f48 4301 eefd 44a8 ea1f ..I....HC...D...
0x0030 0606 0000 0002 0706 0000 0001 0c06 0000 ................
0x0040 05dc 0a06 0000 0000 0d06 0000 0001 0806 ................
0x0050 d183 c761 0906 ffff ffff 1623 3230 392e ...a.......#209.
0x0060 3133 312e 3230 312e 382f 3239 2032 3039 131.201.8/29.209
0x0070 2e31 3331 2e31 3939 2e39 3720 311c 0600 .131.199.97.1...
0x0080 0000 00 ...
17:45:40.918025 arp who-has radius1.egix.net tell svr4.iei.net
0x0000 0001 0800 0604 0001 0050 da1c 4e14 d183 .........P..N...
0x0010 d8ca 0000 0000 0000 d183 d86f 0000 0000 ...........o....
0x0020 0000 0000 0000 0000 0000 0000 0000 ..............
17:45:40.918043 arp reply radius1.egix.net is-at 0:b0:d0:68:6a:23
0x0000 0001 0800 0604 0002 00b0 d068 6a23 d183 ...........hj#..
0x0010 d86f 0050 da1c 4e14 d183 d8ca .o.P..N.....
