I am definetly seeing two EAP portions in the frame. I have not gone looking for where that might be happening.
I am a little familiar with libpcap but a really terrible programmer.
The frame looks kinda like this.
ethereal sees it as a RADIUS frame,
HEADERs:
Radius Protocol Code: Access Challenge. Packet ID 182 Length: 90 Authenticator Attribute Value Pairs
EAP Message(79)
Code Request (1)
ID (35)
Length (6)
Type: PEAP [Palekar] (25)
Type Data (1 byte) Value: 20
Message Authenticator(80) Value........ ( cut up hashes?)
State(24) Value..... .......
Now again in the same frame but without the Message Authenticator.
EAP Message(79)
Code Request (1)
ID (35)
Length (6)
Type: PEAP [Palekar] (25)
Type Data (1 byte) Value: 20
State(24) Value..... .......
And that's it. The client does not respond to this.
-=Bill
Alan DeKok wrote:
Bill Reid <[EMAIL PROTECTED]> wrote:
The only thing I noticed looking at the packet with an analyzer was that there were two EAP sections in the frame. I don't however know if this is normal behavior. Also I didn't really know where the actual mschap challenge was supposed to be located.
There's supposed to be one EAP packet in the frame. The MS-CHAP challenge is in the data portion of the EAP packet, and is encrypted.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
