I apologize for my late response.
I am making use of the request-parser-format and the documentation I found at
this link:
https://gitlab.isc.org/isc-projects/kea/-/blob/2974-new-localize-dhcp-server-command/doc/sphinx/arm/hooks-legal-log.rst?ref_type=heads
With this below, that I copied from the site:
"request-parser-format": "ifelse(pkt4.msgtype == 3, 'Address: ' +
ifelse(option[50].exists, addrtotext(option[50].hex), addrtotext(pkt4.ciaddr))
+ ' has been assigned' + ifelse(option[51].exists, ' for ' +
uint32totext(option[51].hex) + ' seconds', '') + ' to a device with hardware
address: hwtype=' + substring(hexstring(pkt4.htype, ''), 7, 1) + ' ' +
hexstring(pkt4.mac, ':') + ifelse(option[61].exists, ', client-id: ' +
hexstring(option[61].hex, ':'), '') + ifelse(pkt4.giaddr == 0.0.0.0, '', '
connected via relay at address: ' + addrtotext(pkt4.giaddr) +
ifelse(option[82].option[1].exists, ', circuit-id: ' +
hexstring(option[82].option[9].hex, ':'), '') +
ifelse(option[82].option[2].exists, ', remote-id: ' +
hexstring(option[82].option[2].hex, ':'), '') +
ifelse(option[82].option[6].exists, ', subscriber-id: ' +
hexstring(option[82].option[6].hex, ':'), '')), ifelse(pkt4.msgtype == 4 or
pkt4.msgtype == 7, 'Address: ' + ifelse(option[50].exists,
addrtotext(option[50].hex), addrtotext
(pkt4.ciaddr)) + ' has been released from a device with hardware address:
hwtype=' + substring(hexstring(pkt4.htype, ''), 7, 1) + ' ' +
hexstring(pkt4.mac, ':') + ifelse(option[61].exists, ', client-id: ' +
hexstring(option[61].hex, ':'), '') + ifelse(pkt4.giaddr == 0.0.0.0, '', '
connected via relay at address: ' + addrtotext(pkt4.giaddr) +
ifelse(option[82].option[1].exists, ', circuit-id: ' +
hexstring(option[82].option[9].hex, ':'), '') +
ifelse(option[82].option[2].exists, ', remote-id: ' +
hexstring(option[82].option[2].hex, ':'), '') +
ifelse(option[82].option[6].exists, ', subscriber-id: ' +
hexstring(option[82].option[6].hex, ':'), '')), ''))",
I get this in the log:
2025-02-12 12:48:42 CST Address: 67.55.241.229 has been assigned to a device
with hardware address: hwtype=1 80:e8:2c:a2:06:12, client-id:
01:80:e8:2c:a2:06:12 connected via relay at address: 198.49.62.1, circuit-id:
00:00:00:09:59:0a:57:00:00:00:00:52:51:01:39:4e:4c:43:4f:54:65:73:74:2d:45:37:2d:4c:41:42:3a:31:2f:32:2f:31:2f:46:53:41:4e:3a:43:58:4e:4b:30:30:32:39:45:33:41:36:2f:4f:4e:54:4c:6f:67:69:63:61:6c:49:44:3a:38:31:32:2f:02:14:2f:4f:4e:54:50:6f:72:74:3a:67:32:2f:56:4c:41:4e:3a:35:31:38,
remote-id: 00:06:ac:3a:67:d6:de:f2
Now the hexadecimal output does translate to ascii what I need, but I am trying
to find a way to log this in ascii format. I have tried changing the circuit
id portion of the "request-parser-format" from this:
ifelse(option[82].option[1].exists, ', circuit-id: ' +
hexstring(option[82].option[9].hex, ':'), '')
To this: ifelse(pkt4.giaddr == 0.0.0.0, '', ' connected via relay at address:
' + addrtotext(pkt4.giaddr) + ifelse(option[82].option[1].exists, ',
circuit-id: ' + option[82].option[9].hex, '')
This gives me the output of ascii for the circuit id but it puts it on a
separate line, see below:
2025-02-12 13:17:32 CST Address: 67.55.241.229 has been assigned to a device
with hardware address: hwtype=1 80:e8:2c:a2:06:12, client-id:
01:80:e8:2c:a2:06:12 connected via relay at address: 198.49.62.1, circuit-id:
Y
2025-02-12 13:17:32 CST
WRQ9NLCOTest-E7-LAB:1/2/1/FSAN:CXNK0029E3A6/ONTLogicalID:812//ONTPort:g2/VLAN:518,
remote-id: 00:06:ac:3a:67:d6:de:f2
Does anyone have any thoughts on how to prevent the starting of a new line? Or
would there be a different way to get ascii into the log for the circuit id?
Thanks,
Jim Springsteen
Data Administrator
jim.springst...@southslope.com | southslope.com
319-626-2211 main | 319-665-5334 direct
980 North Front St, North Liberty, IA 52317
-----Original Message-----
From: Kea-users <kea-users-boun...@lists.isc.org> On Behalf Of
kea-users-requ...@lists.isc.org
Sent: Thursday, February 6, 2025 7:39 AM
To: kea-users@lists.isc.org
Subject: Kea-users Digest, Vol 128, Issue 2
Send Kea-users mailing list submissions to
kea-users@lists.isc.org
To subscribe or unsubscribe via the World Wide Web, visit
https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.isc.org_mailman_listinfo_kea-2Dusers&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=00XVyNPjSoh9GnI-jjmPD-Tsx_U6eggOZX4FIuEiCYnEfH-3rRfS_h0tNidlbkUU&s=H04kiulh7go_28yLHcPwp8Kyeh_dIUnG2EUm208nj8w&e=
or, via email, send a message with subject or body 'help' to
kea-users-requ...@lists.isc.org
You can reach the person managing the list at
kea-users-ow...@lists.isc.org
When replying, please edit your Subject line so it is more specific than "Re:
Contents of Kea-users digest..."
Today's Topics:
1. Re: Kea DHCP forensic logging (Darren Ankney)
2. Re:
https://urldefense.proofpoint.com/v2/url?u=http-3A__keama-2Dleases.py&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=00XVyNPjSoh9GnI-jjmPD-Tsx_U6eggOZX4FIuEiCYnEfH-3rRfS_h0tNidlbkUU&s=FauJqGAUuamJTUkl5hcagnHdqjLXW8Wig1f_Ux-FO4k&e=
fails with abandoned leases (Darren Ankney)
----------------------------------------------------------------------
Message: 1
Date: Thu, 6 Feb 2025 08:31:30 -0500
From: Darren Ankney
<https://urldefense.proofpoint.com/v2/url?u=http-3A__darren.ankney-40gmail.com&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=00XVyNPjSoh9GnI-jjmPD-Tsx_U6eggOZX4FIuEiCYnEfH-3rRfS_h0tNidlbkUU&s=F8XiZ13qNUvUqZAs2luYQysXT87iBj7rgGZFGXGg9wM&e=>
To: "Kea user's list" <kea-users@lists.isc.org>
Subject: Re: [Kea-users] Kea DHCP forensic logging
Message-ID:
<cakabwhjd4uo0tf+vbtebnyrbt4a1u68x21azx0fwskouqmy...@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"
Hi Jim,
You cannot get logs for the entire DORA process. You can only get logs for:
"DHCPREQUEST, DHCPDECLINE, and DHCPRELEASE messages, et al., and their
responses." see:
https://urldefense.proofpoint.com/v2/url?u=https-3A__kea.readthedocs.io_en_kea-2D2.4.1_arm_hooks.html-23dhcpv4-2Dlog-2Dentries&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=00XVyNPjSoh9GnI-jjmPD-Tsx_U6eggOZX4FIuEiCYnEfH-3rRfS_h0tNidlbkUU&s=zTntJrt3nXw5rOI4Gr4GTr3sjZ4ZO5Zp5ofPrOMk9mw&e=
Responses being DHCPACK and DHCPNAK (though I don't think that it would log
anything on a NAK as that is a negative response). DISCOVER and OFFER are both
ignored as they don't bind anything to the client.
The subsequent REQUEST and ACK is the part of DORA that matters where address
assignment actually takes place. With that in mind, are you getting the logs
you need?
Thank you,
Darren Ankney
On Wed, Jan 29, 2025 at 9:45?AM Jim Springsteen
<jim.springst...@southslope.com> wrote:
>
> Darren,
>
> I have been trying to use a customized response-parser-format, but I can't
> find good documentation on the options I can use to get all the DORA of the
> DHCP process.
>
> This is what I have for the response-parser-format:
>
>
> > "request-parser-format": "hexstring(pkt4.mac, ':') + ' / ' +
> > addrtotext(pkt4.ciaddr) + ' / ' + relay4[1].hex + ' / ' +
> > addrtotext(pkt4.giaddr)"
>
> Do you have any suggestions on how I should alter the above command to get
> the entire DORA logging?
>
>
>
> Thanks,
> Jim Springsteen
> Data Administrator
>
> jim.springst...@southslope.com | southslope.com
> 319-626-2211 main | 319-665-5334 direct
> 980 North Front St, North Liberty, IA 52317
>
>
>
> -----Original Message-----
> From: Kea-users <kea-users-boun...@lists.isc.org> On Behalf Of
> kea-users-requ...@lists.isc.org
> Sent: Wednesday, January 29, 2025 6:00 AM
> To: kea-users@lists.isc.org
> Subject: Kea-users Digest, Vol 127, Issue 26
>
> Send Kea-users mailing list submissions to
> kea-users@lists.isc.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
>
> https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.isc.org_mai
> lman_listinfo_kea-2Dusers&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_C
> dpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=id4thKZ4cnP
> fMJjYEfye3UIJQlg2-EHjb-jEReUtM2hj8URdoQJynRlNRK59RmKx&s=JeF6gcy1qwU0_n
> 9lqu1bjaaAy-2W6soqDEcAAWSWliA&e= or, via email, send a message with
> subject or body 'help' to
> kea-users-requ...@lists.isc.org
>
> You can reach the person managing the list at
> kea-users-ow...@lists.isc.org
>
> When replying, please edit your Subject line so it is more specific than "Re:
> Contents of Kea-users digest..."
>
>
> Today's Topics:
>
> 1. Re: Kea DHCP forensic logging (Darren Ankney)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Tue, 28 Jan 2025 21:07:02 -0500
> From: Darren Ankney
> <https://urldefense.proofpoint.com/v2/url?u=http-3A__darren.ankney-40g
> mail.com&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjT
> emB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=id4thKZ4cnPfMJjYEfye3UIJQlg2
> -EHjb-jEReUtM2hj8URdoQJynRlNRK59RmKx&s=r9HpK1I_3VjlqAgvYFxPJLuNYE1_Jph
> qEqeRcnpDFfg&e=>
> To: "Kea user's list" <kea-users@lists.isc.org>
> Subject: Re: [Kea-users] Kea DHCP forensic logging
> Message-ID:
>
> <cakabwhj78vuejqqlf9sukv+ect45vt+9fa+698cpbg5_fwj...@mail.gmail.com>
> Content-Type: text/plain; charset="UTF-8"
>
> Hi Jim,
>
> I think, if I recall correctly, that DISCOVER are not logged by the legal
> log. I think if you supply a customized response-parser-format, you'll see
> the option 82 from the OFFER logged.
>
> Thank you,
> Darren Ankney
>
> On Tue, Jan 28, 2025 at 4:51?PM Jim Springsteen
> <jim.springst...@southslope.com> wrote:
> >
> > After looking at the capture that is attached, I see that the
> > information that I need logged is coming in as Option 82 suboption 9
> > (vendor information)
> >
> > I did add a request-parser-format line ( see that below):
> >
> > "request-parser-format": "hexstring(pkt4.mac, ':') + ' / ' +
> > addrtotext(pkt4.ciaddr) + ' / ' + relay4[1].hex + ' / ' +
> > addrtotext(pkt4.giaddr)"
> >
> > With this I was able to get the info in the forensics log, but the discover
> > comes across like this in the log:
> >
> > 2025-01-28 15:36:37 CST / 80:e8:2c:b0:fd:67 / 0.0.0.0 / /
> > 198.49.62.1
> >
> > I don't see the info until I do a renewal of the dhcp client, then I see
> > this:
> >
> > 2025-01-28 15:48:11 CST 80:e8:2c:b0:fd:67 / 67.55.241.229 /
> > NLCOTest-E7-LAB:1/2/1/CXNK0029E3A6/g2 / 0.0.0.0
> > 2025-01-28 15:48:12 CST 80:e8:2c:b0:fd:67 / 67.55.241.229 /
> > NLCOTest-E7-LAB:1/2/1/CXNK0029E3A6/g2 / 0.0.0.0
> > 2025-01-28 15:48:13 CST 80:e8:2c:b0:fd:67 / 67.55.241.229 /
> > NLCOTest-E7-LAB:1/2/1/CXNK0029E3A6/g2 / 0.0.0.0
> > 2025-01-28 15:48:16 CST 80:e8:2c:b0:fd:67 / 67.55.241.229 / /
> > 198.49.62.1
> >
> > Thanks,
> > Jim Springsteen
> > Data Administrator
> >
> > jim.springst...@southslope.com | southslope.com
> > 319-626-2211 main | 319-665-5334 direct
> > 980 North Front St, North Liberty, IA 52317
> >
> >
> >
> > -----Original Message-----
> > From: Kea-users <kea-users-boun...@lists.isc.org> On Behalf Of
> > kea-users-requ...@lists.isc.org
> > Sent: Friday, January 24, 2025 5:08 AM
> > To: kea-users@lists.isc.org
> > Subject: Kea-users Digest, Vol 127, Issue 21
> >
> > Send Kea-users mailing list submissions to
> > kea-users@lists.isc.org
> >
> > To subscribe or unsubscribe via the World Wide Web, visit
> >
> > https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.isc.org_m
> > ai
> > lman_listinfo_kea-2Dusers&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A
> > _C
> > dpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=nNs75CJrm
> > ip
> > C9uj3o92Bphlar4j-AjnDtrIvexnKk8e9RtceaxgN3Ek5NJwFKjc_&s=p5ZWTGAj__nV
> > QK LyURuyGtKss_U7SA-BwTIBCChQmLU&e= or, via email, send a message
> > with subject or body 'help' to
> > kea-users-requ...@lists.isc.org
> >
> > You can reach the person managing the list at
> > kea-users-ow...@lists.isc.org
> >
> > When replying, please edit your Subject line so it is more specific than
> > "Re: Contents of Kea-users digest..."
> >
> >
> > Today's Topics:
> >
> > 1. Re: Kea DHCP forensic logging (Darren Ankney)
> > 2. Option 125 suboption 1 not send (DDFR | Ronald Blaas)
> >
> >
> > --------------------------------------------------------------------
> > --
> >
> > Message: 1
> > Date: Thu, 23 Jan 2025 13:27:59 -0500
> > From: Darren Ankney
> > <https://urldefense.proofpoint.com/v2/url?u=http-3A__darren.ankney-4
> > 0g> >
> > mail.com&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eC
> > jT
> > emB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=nNs75CJrmipC9uj3o92Bphlar4
> > j-
> > AjnDtrIvexnKk8e9RtceaxgN3Ek5NJwFKjc_&s=vEWhZwXUHXKIXNAjOUG6E06cItvpV
> > Jo
> > io5lABUSumNU&e=>
> > To: "Kea user's list" <kea-users@lists.isc.org>
> > Subject: Re: [Kea-users] Kea DHCP forensic logging
> > Message-ID:
> >
> > <cakabwhgxhf8kytqqziheo+evxwtxz8zdnik1ks6-qgy_r7c...@mail.gmail.com>
> > Content-Type: text/plain; charset="UTF-8"
> >
> > Hi Jim,
> >
> > Could you provide a .pcap file showing the DORA exchange from some client
> > that contains this option 82 data? I would like to see what is
> > different. It should look something like this:
> >
> > 2025-01-23 17:58:28 UTC Address: 192.168.20.113 has been assigned
> > for
> > 8 hrs 0 mins 0 secs to a device with hardware address: hwtype=1
> > d2:4d:e0:33:23:dc connected via relay at address: 192.168.20.1,
> > identified by circuit-id: 69:67:63:30:2e:32:30 (igc0.20), context: {
> > "ISC": { "relay-agent-info": { "sub-options": "0x0107696763302E3230"
> > } } }
> >
> > Note that the ASCII of the circuit-id is shown in parenthesis
> > following the hex circuit-id
> >
> > It is possible that yours is encoded differently? You might need to make a
> > custom "request-parser-format", "response-parser-format", or both (see here:
> > https://urldefense.proofpoint.com/v2/url?u=https-3A__kea.readthedocs.io_en_kea-2D2.6.1_arm_hooks.html-23configuring-2Dthe-2Dforensic-2Dlogging-2Dhooks&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=nNs75CJrmipC9uj3o92Bphlar4j-AjnDtrIvexnKk8e9RtceaxgN3Ek5NJwFKjc_&s=fiZM9XONPkioFDSDe1YuxvJJADWPJ6ikYq7Nt3tAmf0&e=).
> > These use the same expression syntax as client-classification (see
> > here:
> > https://urldefense.proofpoint.com/v2/url?u=https-3A__kea.readthedocs.io_en_kea-2D2.6.1_arm_classify.html-23using-2Dexpressions-2Din-2Dclassification&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=nNs75CJrmipC9uj3o92Bphlar4j-AjnDtrIvexnKk8e9RtceaxgN3Ek5NJwFKjc_&s=1xgvaNG7WfQPzwrwuilI9TMwpDJnkWYZN7QFf-CTRww&e=).
> >
> > Thank you,
> > Darren Ankney
> >
> >
> > On Tue, Jan 21, 2025 at 4:34?PM Jim Springsteen
> > <jim.springst...@southslope.com> wrote:
> > >
> > > Darren,
> > >
> > >
> > >
> > > I appreciate your response. I did follow the example and this is what I
> > > have in my config:
> > >
> > > "hooks-libraries": [
> > >
> > > {
> > >
> > > "library":
> > > "/usr/lib/x86_64-linux-gnu/kea/hooks/libdhcp_legal_log.so",
> > >
> > > "parameters": {
> > >
> > > "path": "/var/log/kea",
> > >
> > > "base-name": "kea-forensic4"
> > >
> > > }
> > >
> > > },
> > >
> > > But in my kea-forensic4 log, I have this entry:
> > >
> > > ?identified by circuit-id: 00:04:00:00:00:06 and remote-id:
> > > 00:06:ac:3a:67:d6:de:f2?
> > >
> > >
> > >
> > > I have confirmed via tcpdump that the server is receiving a string of
> > > characters as the circuit ID from my access gear.
> > >
> > >
> > >
> > > I am not sure what I am missing.
> > >
> > >
> > >
> > > Thanks,
> > >
> > > Jim Springsteen
> > >
> > > Data Administrator
> > >
> > >
> > >
> > > jim.springst...@southslope.com | southslope.com
> > >
> > > 319-626-2211 main | 319-665-5334 direct
> > >
> > > 980 North Front St, North Liberty, IA 52317
> > >
> > >
> > >
> > >
> > > --
> > > ISC funds the development of this software with paid support
> > > subscriptions. Contact us at
> > > https://urldefense.proofpoint.com/v2/url?u=https-3A__www.isc.org_contact_&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=nNs75CJrmipC9uj3o92Bphlar4j-AjnDtrIvexnKk8e9RtceaxgN3Ek5NJwFKjc_&s=bNr6vqQGNhS23OADO6UoVMTdGDV8ySW97vc_LF9cSOE&e=
> > > for more information.
> > >
> > > To unsubscribe visit
> > > https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.isc.org_mailman_listinfo_kea-2Dusers&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=nNs75CJrmipC9uj3o92Bphlar4j-AjnDtrIvexnKk8e9RtceaxgN3Ek5NJwFKjc_&s=p5ZWTGAj__nVQKLyURuyGtKss_U7SA-BwTIBCChQmLU&e=.
> > >
> > > Kea-users mailing list
> > > Kea-users@lists.isc.org
> > > https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.isc.org
> > > _m
> > > ai
> > > lman_listinfo_kea-2Dusers&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v
> > > 5A
> > > _C
> > > dpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=nNs75CJ
> > > rm
> > > ip
> > > C9uj3o92Bphlar4j-AjnDtrIvexnKk8e9RtceaxgN3Ek5NJwFKjc_&s=p5ZWTGAj__
> > > nV
> > > QK
> > > LyURuyGtKss_U7SA-BwTIBCChQmLU&e=
> >
> >
> > ------------------------------
> >
> > Message: 2
> > Date: Fri, 24 Jan 2025 11:07:59 +0000
> > From: DDFR | Ronald Blaas
> > <https://urldefense.proofpoint.com/v2/url?u=http-3A__ronald.blaas-40
> > dd> >
> > fr.nl&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTe
> > mB
> > 5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=nNs75CJrmipC9uj3o92Bphlar4j-A
> > jn
> > DtrIvexnKk8e9RtceaxgN3Ek5NJwFKjc_&s=buRwe0me-1ijUorvnGd-aaSqpAEEA2hn
> > -E
> > QWqasHrVw&e=>
> > To: "kea-users@lists.isc.org" <kea-users@lists.isc.org>
> > Subject: [Kea-users] Option 125 suboption 1 not send
> > Message-ID:
> >
> > <am9pr04mb858585936b5e37857be75e558b...@am9pr04mb8585.eurprd04.prod.
> > ou
> > https://urldefense.proofpoint.com/v2/url?u=http-3A__tlook.com&d=DwIC
> > Ag&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB5sg6isrvXu
> > bUeohlcjyd3d-BSpS2k69PYabI&m=00XVyNPjSoh9GnI-jjmPD-Tsx_U6eggOZX4FIuE
> > iCYnEfH-3rRfS_h0tNidlbkUU&s=B9atDya9v6L1S7PkPihfctwecSirt81MZ-h-3VVE
> > cqg&e=>
> >
> > Content-Type: text/plain; charset="iso-8859-1"
> >
> > Hi all
> >
> > I must be forgetting something..
> >
> > I have 2 type of Genexis CPEs the 2410 and the 3410
> >
> > Configuring option125 sub 2 and 4 for the Genexis 3410 are working
> > as planned
> >
> > But somehow I can't get the option125 sub1 working for the Genexis
> > 2410
> >
> > Looking at a Wireshark I see that option125 isn't even sent to the client
> > Looking in the kea dhcp log I do see that the client is a member of the
> > correct client-class.
> >
> >
> > I might be overlooking something.
> >
> > Anyone an idea?
> >
> > Relative config below:
> > (kea-dhcp.conf)
> > "option-def": [
> > {
> > "array": false,
> > "code": 1,
> > "name": "gaps",
> > "space": "vendor-25167",
> > "type": "string"
> > },
> > ......
> >
> > "client-classes": [
> > {
> > "name": "Genexis-Gaps",
> > "test": "(substring(option[60].hex,0,6) == 'geneos')",
> > "option-data": [
> > {
> > "name": "gaps",
> > "space": "vendor-25167",
> > "data": "s=xx.xx.xx.xx;v=108",
> > "always-send": true
> > }
> > ]
> > },
> >
> >
> > Regards,
> >
> > Ronald
> >
> >
> > -------------- next part -------------- An HTML attachment was
> > scrubbed...
> > URL:
> > <https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.isc.org_
> > pi> >
> > permail_kea-2Dusers_attachments_20250124_0bdd0696_attachment.htm&d=D
> > wI
> > CAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB5sg6isrvX
> > ub
> > Ueohlcjyd3d-BSpS2k69PYabI&m=nNs75CJrmipC9uj3o92Bphlar4j-AjnDtrIvexnK
> > k8
> > e9RtceaxgN3Ek5NJwFKjc_&s=ofKALBkbB4lInxE-pksibp_x11PCmcEStej-7XgAT7w
> > &e
> > =>
> >
> > ------------------------------
> >
> > Subject: Digest Footer
> >
> > _______________________________________________
> >
> > ISC funds the development of this software with paid support subscriptions.
> > Contact us at
> > https://urldefense.proofpoint.com/v2/url?u=https-3A__www.isc.org_contact_&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=nNs75CJrmipC9uj3o92Bphlar4j-AjnDtrIvexnKk8e9RtceaxgN3Ek5NJwFKjc_&s=bNr6vqQGNhS23OADO6UoVMTdGDV8ySW97vc_LF9cSOE&e=
> > for more information.
> >
> > Kea-users mailing list
> > Kea-users@lists.isc.org
> > https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.isc.org_m
> > ai
> > lman_listinfo_kea-2Dusers&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A
> > _C
> > dpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=nNs75CJrm
> > ip
> > C9uj3o92Bphlar4j-AjnDtrIvexnKk8e9RtceaxgN3Ek5NJwFKjc_&s=p5ZWTGAj__nV
> > QK
> > LyURuyGtKss_U7SA-BwTIBCChQmLU&e=
> >
> >
> > ------------------------------
> >
> > End of Kea-users Digest, Vol 127, Issue 21
> > ******************************************
> >
> > ----------
> >
> > This email has been scanned for spam and viruses. Visit the following link
> > to report this email as spam:
> > https://moduscloud.cloud-protect.net/app/report_spam.php?mod_id=11&m
> > od
> > _option=logitem&report=1&type=easyspam&k=k1&payload=53616c7465645f5f
> > e7
> > b87a4130921b2e4070c1a0169470d5fdd4e2c864dc2655a39f2689c4ec6bc299460c
> > b2
> > 91b5b3418e6024294c0b2741576d2f0eeb34f753140c3058b3de2062c8c1d13aa950
> > af
> > 78034417c8dbe93d87d965e0a027e790ba36e8b5d2130353f2c06b7d4661ffd75c97
> > 67
> > 7e48532ee2fe9c5ef3ab57926b21a6bcfebe2a66f7149a113b6751670b140104d25b
> > 87
> > a974c19a5621249ad1ff5e
> >
> > [EXTERNAL EMAIL] DO NOT CLICK links or attachments unless you recognize the
> > sender and know the content is safe.
> > --
> > ISC funds the development of this software with paid support subscriptions.
> > Contact us at
> > https://urldefense.proofpoint.com/v2/url?u=https-3A__www.isc.org_contact_&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=id4thKZ4cnPfMJjYEfye3UIJQlg2-EHjb-jEReUtM2hj8URdoQJynRlNRK59RmKx&s=PDZqTNtcgDPZEQO6T5ztI9D_ue0dYZ_FEbHXMnSdPsY&e=
> > for more information.
> >
> > To unsubscribe visit
> > https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.isc.org_mailman_listinfo_kea-2Dusers&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=id4thKZ4cnPfMJjYEfye3UIJQlg2-EHjb-jEReUtM2hj8URdoQJynRlNRK59RmKx&s=JeF6gcy1qwU0_n9lqu1bjaaAy-2W6soqDEcAAWSWliA&e=.
> >
> > Kea-users mailing list
> > Kea-users@lists.isc.org
> > https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.isc.org_m
> > ai
> > lman_listinfo_kea-2Dusers&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A
> > _C
> > dpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=id4thKZ4c
> > nP
> > fMJjYEfye3UIJQlg2-EHjb-jEReUtM2hj8URdoQJynRlNRK59RmKx&s=JeF6gcy1qwU0
> > _n
> > 9lqu1bjaaAy-2W6soqDEcAAWSWliA&e=
>
>
> ------------------------------
>
> Subject: Digest Footer
>
> _______________________________________________
>
> ISC funds the development of this software with paid support subscriptions.
> Contact us at
> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.isc.org_contact_&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=id4thKZ4cnPfMJjYEfye3UIJQlg2-EHjb-jEReUtM2hj8URdoQJynRlNRK59RmKx&s=PDZqTNtcgDPZEQO6T5ztI9D_ue0dYZ_FEbHXMnSdPsY&e=
> for more information.
>
> Kea-users mailing list
> Kea-users@lists.isc.org
> https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.isc.org_mai
> lman_listinfo_kea-2Dusers&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_C
> dpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=id4thKZ4cnP
> fMJjYEfye3UIJQlg2-EHjb-jEReUtM2hj8URdoQJynRlNRK59RmKx&s=JeF6gcy1qwU0_n
> 9lqu1bjaaAy-2W6soqDEcAAWSWliA&e=
>
>
> ------------------------------
>
> End of Kea-users Digest, Vol 127, Issue 26
> ******************************************
>
> ----------
>
> This email has been scanned for spam and viruses. Visit the following link to
> report this email as spam:
> https://moduscloud.cloud-protect.net/app/report_spam.php?mod_id=11&mod
> _option=logitem&report=1&type=easyspam&k=k1&payload=53616c7465645f5f70
> e8e56eb381a2fd3644c318548c31b5db927f61713563b0539a1beb310502432d11d13c
> e4f166117fdf2f40b624775889ba465ce0897c17d9f18d771ab3f35c42228f3b4e0e56
> 8e13c48de895f4981fa5fb4043fc5e98f3d309f466183cb921899def3937a8a4b035fe
> 8a8e3a58e070268764dd20da1b5406b8b643d2e96598a832ebc823a936ace9e457db7a
> fe321691f4dd7bb814c8fb
>
> [EXTERNAL EMAIL] DO NOT CLICK links or attachments unless you recognize the
> sender and know the content is safe.
> --
> ISC funds the development of this software with paid support subscriptions.
> Contact us at
> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.isc.org_contact_&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=00XVyNPjSoh9GnI-jjmPD-Tsx_U6eggOZX4FIuEiCYnEfH-3rRfS_h0tNidlbkUU&s=juDLxijhKjFXAtcSUGYhFh5GMo9EjOjI8wZBwm-JDtY&e=
> for more information.
>
> To unsubscribe visit
> https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.isc.org_mailman_listinfo_kea-2Dusers&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=00XVyNPjSoh9GnI-jjmPD-Tsx_U6eggOZX4FIuEiCYnEfH-3rRfS_h0tNidlbkUU&s=H04kiulh7go_28yLHcPwp8Kyeh_dIUnG2EUm208nj8w&e=.
>
> Kea-users mailing list
> Kea-users@lists.isc.org
> https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.isc.org_mai
> lman_listinfo_kea-2Dusers&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_C
> dpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=00XVyNPjSoh
> 9GnI-jjmPD-Tsx_U6eggOZX4FIuEiCYnEfH-3rRfS_h0tNidlbkUU&s=H04kiulh7go_28
> yLHcPwp8Kyeh_dIUnG2EUm208nj8w&e=
------------------------------
Message: 2
Date: Thu, 6 Feb 2025 08:39:01 -0500
From: Darren Ankney
<https://urldefense.proofpoint.com/v2/url?u=http-3A__darren.ankney-40gmail.com&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=00XVyNPjSoh9GnI-jjmPD-Tsx_U6eggOZX4FIuEiCYnEfH-3rRfS_h0tNidlbkUU&s=F8XiZ13qNUvUqZAs2luYQysXT87iBj7rgGZFGXGg9wM&e=>
To: "Kea user's list" <kea-users@lists.isc.org>
Subject: Re: [Kea-users]
https://urldefense.proofpoint.com/v2/url?u=http-3A__keama-2Dleases.py&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=00XVyNPjSoh9GnI-jjmPD-Tsx_U6eggOZX4FIuEiCYnEfH-3rRfS_h0tNidlbkUU&s=FauJqGAUuamJTUkl5hcagnHdqjLXW8Wig1f_Ux-FO4k&e=
fails with abandoned leases
Message-ID:
<CAKabWHivhE2Bkoa-GWL4zRqfOOzjo=tbfj-yovbgxgfprfm...@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"
Hi John,
The latest version of this file should be here:
https://urldefense.proofpoint.com/v2/url?u=https-3A__gitlab.isc.org_isc-2Dprojects_keama_-2D_blob_master_leases_keama-2Dleases.py&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=00XVyNPjSoh9GnI-jjmPD-Tsx_U6eggOZX4FIuEiCYnEfH-3rRfS_h0tNidlbkUU&s=BC4sJRzYewrCZ-6Po4yerv1clGoQFkSNRMTMljdBWWw&e=
You can create an account on
https://urldefense.proofpoint.com/v2/url?u=https-3A__gitlab.isc.org_users_sign-5Fup&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=00XVyNPjSoh9GnI-jjmPD-Tsx_U6eggOZX4FIuEiCYnEfH-3rRfS_h0tNidlbkUU&s=fw6iUxOdX1Q_onDFQSsC04gTR-q3rWLDtYM2MOsUPbM&e=
but I think you can't use an @gmail.com address (or other public free email
provider address) to do so (due to spam).
Once you've been able to create an account, it should be no problem for you to
open an issue here:
https://urldefense.proofpoint.com/v2/url?u=https-3A__gitlab.isc.org_isc-2Dprojects_keama_-2D_issues&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=00XVyNPjSoh9GnI-jjmPD-Tsx_U6eggOZX4FIuEiCYnEfH-3rRfS_h0tNidlbkUU&s=m8NOAfoZsG2hCNCB6JoI6pI4_ByUFyF57nL6RiSVvVw&e=
where you can attach your patch in whatever way you see fit. I don't think
you'll be able to actually create a merge request though.
Thank you,
Darren Ankney
On Mon, Feb 3, 2025 at 10:57?PM John Lind <steinhel...@gmail.com> wrote:
>
> I managed to pull the script from the GIT repository. It doesn't seem to be
> versioned, but I believe it is the latest and it says:
>
> # dhcp2kea by marmo
> # 6-12-2022 (dhcpd4), 14-12-2022 (dhcpd6), 15-12-2022 (dhcp2kea.php) #
> 23-12-2022 ("addr key=value" option)
>
> It seems to work great on my "leases" file, EXCEPT for the entries that are
> abandoned, e.g.
> lease 192.168.1.43 {
> starts 0 2023/12/17 00:15:52 UTC;
> ends 2 2024/01/16 00:15:52 UTC;
>
> abandoned;
> }
>
> Then it says,
>
> root@remo:/home/john/xfer # python3
> https://urldefense.proofpoint.com/v2/url?u=http-3A__keama-2Dleases.py&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=00XVyNPjSoh9GnI-jjmPD-Tsx_U6eggOZX4FIuEiCYnEfH-3rRfS_h0tNidlbkUU&s=FauJqGAUuamJTUkl5hcagnHdqjLXW8Wig1f_Ux-FO4k&e=
> dhcpd.leases Traceback (most recent call last):
> File "/home/john/xfer/keama-leases.py", line 329, in <module>
> print(leases,file=f) # writing
> ^^^^^^^^^^^^^^^^^^^^
> File "/home/john/xfer/keama-leases.py", line 105, in __str__
> , v["hardware ethernet"] # hwaddr
> ~^^^^^^^^^^^^^^^^^^^^^
> KeyError: 'hardware ethernet'
>
> This is not a show stopper for me, because I can just edit out those
> half-dozen or so entries and then it seems to work fine (though I haven't
> tried importing the .csv file into a mem file - not that far yet - or maybe
> this IS the format of the mem file?) but since this is a perfectly legitimate
> entry from isc-dhcpd, I'm wondering if a fix might not be in order? I'm
> guessing that it should be fairly simple to test for the existence of that
> key and skip the entry, but I'm not a python person (perl rules!) so I don't
> feel fully confident in trying to fix this. If I' the best available
> candidate, I'm willing to take a run at it.
>
> Actually, I did just take a swing at it. It was easy.
>
> root@remo:/home/john/xfer # diff
> https://urldefense.proofpoint.com/v2/url?u=http-3A__keama-2Dleases.py&;
> d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB5sg6is
> rvXubUeohlcjyd3d-BSpS2k69PYabI&m=00XVyNPjSoh9GnI-jjmPD-Tsx_U6eggOZX4FI
> uEiCYnEfH-3rRfS_h0tNidlbkUU&s=FauJqGAUuamJTUkl5hcagnHdqjLXW8Wig1f_Ux-F
> O4k&e=
> https://urldefense.proofpoint.com/v2/url?u=http-3A__keama-2Dleases-2Df
> ix.py&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB
> 5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=00XVyNPjSoh9GnI-jjmPD-Tsx_U6egg
> OZX4FIuEiCYnEfH-3rRfS_h0tNidlbkUU&s=l-Yv_rRBDytZlsat5jxftwE88bojeG69go
> Bn_XRupLs&e=
> 96a97,98
> > if "hardware ethernet" not in v:
> > continue
>
> Can someone help me commit this to git?
>
> --
> John Lind
> steinhel...@gmail.com
>
> --
> ISC funds the development of this software with paid support subscriptions.
> Contact us at
> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.isc.org_contact_&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=00XVyNPjSoh9GnI-jjmPD-Tsx_U6eggOZX4FIuEiCYnEfH-3rRfS_h0tNidlbkUU&s=juDLxijhKjFXAtcSUGYhFh5GMo9EjOjI8wZBwm-JDtY&e=
> for more information.
>
> To unsubscribe visit
> https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.isc.org_mailman_listinfo_kea-2Dusers&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=00XVyNPjSoh9GnI-jjmPD-Tsx_U6eggOZX4FIuEiCYnEfH-3rRfS_h0tNidlbkUU&s=H04kiulh7go_28yLHcPwp8Kyeh_dIUnG2EUm208nj8w&e=.
>
> Kea-users mailing list
> Kea-users@lists.isc.org
> https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.isc.org_mai
> lman_listinfo_kea-2Dusers&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_C
> dpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=00XVyNPjSoh
> 9GnI-jjmPD-Tsx_U6eggOZX4FIuEiCYnEfH-3rRfS_h0tNidlbkUU&s=H04kiulh7go_28
> yLHcPwp8Kyeh_dIUnG2EUm208nj8w&e=
------------------------------
Subject: Digest Footer
_______________________________________________
ISC funds the development of this software with paid support subscriptions.
Contact us at
https://urldefense.proofpoint.com/v2/url?u=https-3A__www.isc.org_contact_&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=00XVyNPjSoh9GnI-jjmPD-Tsx_U6eggOZX4FIuEiCYnEfH-3rRfS_h0tNidlbkUU&s=juDLxijhKjFXAtcSUGYhFh5GMo9EjOjI8wZBwm-JDtY&e=
for more information.
Kea-users mailing list
Kea-users@lists.isc.org
https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.isc.org_mailman_listinfo_kea-2Dusers&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=eCjTemB5sg6isrvXubUeohlcjyd3d-BSpS2k69PYabI&m=00XVyNPjSoh9GnI-jjmPD-Tsx_U6eggOZX4FIuEiCYnEfH-3rRfS_h0tNidlbkUU&s=H04kiulh7go_28yLHcPwp8Kyeh_dIUnG2EUm208nj8w&e=
------------------------------
End of Kea-users Digest, Vol 128, Issue 2
*****************************************
[EXTERNAL EMAIL] DO NOT CLICK links or attachments unless you recognize the
sender and know the content is safe.
--
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/ for more information.
To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.
Kea-users mailing list
Kea-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/kea-users
