Hello,
I use freeradius-0.5 on a linux box.
I am getting strange accounting behavior.
I noticed weird client IP directories being created in my
/usr/adm/radacct directory. My normal clients are 192.168.192.22 and
192.168.192.23. I have two directories, 192.168.192.22 and
192.168.192.23, in my /usr/adm/radacct directory, as it should be, and
these two directories have details files, as they should.
However, I also have many weird directories with names like
208.221.28.8, 40.37.27.8, 0.35.27.8, etc. Like I said, I have many of
these weird directories. Each one of these directories has a detail
file, but there are only 'Stop' records in these detail files.
I started a tcpdump session to capture the traffic from ports 1645 and
1646 (I use the old ports for radius).
In the /usr/adm/radacct/208.221.28.8/detail file I have:
[WA:root@pri radacct]# cat 208.221.28.8/detail
Wed Oct 30 21:03:04 2002
Acct-Status-Type = Stop
NAS-IP-Address = 192.168.192.5
Acct-Delay-Time = 0
User-Name = "bono"
NAS-Port = 3460
Acct-Session-Id = "00036E07"
Service-Type = Framed-User
Framed-Protocol = PPP
Acct-Session-Time = 0
Acct-Input-Octets = 0
Acct-Output-Octets = 0
Acct-Input-Packets = 0
Acct-Output-Packets = 0
Client-IP-Address = 208.221.28.8
Timestamp = 1036036984
The corresponding packet in my tcpdump that relates to 208.221.28.8 is:
21:03:04.201975 pri.wildapache.net.radacct > 208.221.28.8.32815: [udp
sum ok]
rad-account-resp 20 [id 18] (DF) (ttl 64, id 0, len 48)
Freeradius is creating and sending accounting information to the detail
file in 208.221.28.8
This type of activity is very random. That is, I only get this type of
weirdness ever so often for different users. Most of the time there is
only one entry in a given 'weird client' directory, but sometimes there
are multiple entries for different users. These are always 'Stop'
records.
Does anyone know what is causing this? Have I forgotten/missed
something in my configuration?
I really need to get this cleared up since it is messing up my
statistical records. Any help will be greatly appreciated.
Thanks,
Murrah Boswell
Systems Administrator
Wild Apache Internet Services
[EMAIL PROTECTED]
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
