On Tue, 01 Jul 2003 11:23:09 -0400 "Alan DeKok" <[EMAIL PROTECTED]> wrote:
> Graeme Hinchliffe <[EMAIL PROTECTED]> wrote: > > I am testing Free RADIUS to be a replacement for our current RADIUS > > (icRADIUS). I have installed free RADIUS on my local machine and > > fired a test RADIUS packet at it, > > With what client? It is a small app that I wrote myself to test stability of radius daemons. It works perfectly with our current radius servers, and TCPdump shows valid packets being created by it. > > however the daemon doesn't respond and logs the following: > > > > Error: WARNING: Malformed RADIUS packet from host 127.0.0.1: too long (length > > 17152 > maximum 4096) > > If you look at src/lib/radius.c, you'll see that the length it's > complaining about is the length which is returned by the system call > recvfrom(). So either the packet *is* 17k, or the recfrom() call is > returning a weird value. Checking with TCPdump, the packet is deffinately NOT 17K :) 0x0000 4500 005a cd03 4000 4011 6f8d 7f00 0001 [EMAIL PROTECTED]@.o..... 0x0010 7f00 0001 dcc1 066d 0046 7537 0101 3e00 .......m.Fu7..>. 0x0020 466d 3104 22f9 6a17 a0fb d70c 9f6b 25f8 Fm1.".j......k%. 0x0030 010c 6772 6165 6d65 407a 656e 0213 d04d [EMAIL PROTECTED] 0x0040 8f35 d4a0 f8fb d054 23e6 442c a385 200b .5.....T#.D,.... 0x0050 6c6f 6361 6c68 6f73 7400 localhost. My TCPdump command line is: tcpdump -X -s 512 udp port 1645 -i lo as you can see from the above packet it falls short of 512 bytes also. (Actual RADIUS data starts at 0x001c) > > If I fire a packet from the same util at our current radius servers > > it responds fine. Also performing a tcpdump shows the packet is not > > 17K in size and is not malformed. > > What OS are you running? Redhat 9 on Intel Celeron -- ----- Graeme Hinchliffe (BSc) Core Internet Systems Designer Zen Internet (http://www.zen.co.uk) ICQ 3842605 (link) Sales : 0870 6000 971 Fax : 0870 6000 972 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
