Hello Emmanuel,
this is the output of the authorization not the accounting. (btw it's
not debug)
what about :
raddebug -f /usr/local/pf/run/radius-acct.sock -t 300
Regards
Fabrice
Le 2017-08-18 à 06:04, Emmanuel Togo a écrit :
Hello Fabrice,
I got the raddbug working. See the output below
raddebug -f /usr/local/pf/var/run/radiusd.sock -t 300
(3180) Fri Aug 18 10:00:15 2017: Debug: Received Access-Request Id 34
from 10.1.5.145:40185 to 197.255.124.14:1812 length 164
(3180) Fri Aug 18 10:00:15 2017: Debug: Cleaning up request packet ID
34 with timestamp +88641
(3181) Fri Aug 18 10:00:19 2017: Debug: Received Access-Request Id 37
from 10.1.5.145:40185 to 197.255.124.14:1812 length 164
(3182) Fri Aug 18 10:00:19 2017: Debug: Received Access-Request Id 36
from 10.1.5.145:40185 to 197.255.124.14:1812 length 164
(3181) Fri Aug 18 10:00:19 2017: Debug: Cleaning up request packet ID
37 with timestamp +88645
(3182) Fri Aug 18 10:00:19 2017: Debug: Cleaning up request packet ID
36 with timestamp +88645
(3183) Fri Aug 18 10:00:29 2017: Debug: Received Access-Request Id 40
from 10.1.5.145:40185 to 197.255.124.14:1812 length 164
(3183) Fri Aug 18 10:00:29 2017: Debug: Cleaning up request packet ID
40 with timestamp +88655
(3184) Fri Aug 18 10:00:32 2017: Debug: Received Access-Request Id 40
from 10.1.5.145:40185 to 197.255.124.14:1812 length 164
(3184) Fri Aug 18 10:00:32 2017: Debug: Cleaning up request packet ID
40 with timestamp +88658
(3185) Fri Aug 18 10:00:38 2017: Debug: Received Access-Request Id 40
from 10.1.5.145:40185 to 197.255.124.14:1812 length 164
(3185) Fri Aug 18 10:00:38 2017: Debug: Cleaning up request packet ID
40 with timestamp +88664
(3186) Fri Aug 18 10:00:50 2017: Debug: Received Access-Request Id 40
from 10.1.5.145:40185 to 197.255.124.14:1812 length 164
(3186) Fri Aug 18 10:00:50 2017: Debug: Cleaning up request packet ID
40 with timestamp +88676
(3187) Fri Aug 18 10:00:51 2017: Debug: Received Access-Request Id 38
from 10.1.5.145:40185 to 197.255.124.14:1812 length 164
(3187) Fri Aug 18 10:00:51 2017: Debug: Cleaning up request packet ID
38 with timestamp +88677
(3188) Fri Aug 18 10:00:59 2017: Debug: Received Access-Request Id 41
from 10.1.5.145:40185 to 197.255.124.14:1812 length 164
(3188) Fri Aug 18 10:00:59 2017: Debug: Cleaning up request packet ID
41 with timestamp +88685
(3189) Fri Aug 18 10:01:02 2017: Debug: Received Access-Request Id 41
from 10.1.5.145:40185 to 197.255.124.14:1812 length 164
(3189) Fri Aug 18 10:01:02 2017: Debug: Cleaning up request packet ID
41 with timestamp +88688
(3190) Fri Aug 18 10:01:08 2017: Debug: Received Access-Request Id 41
from 10.1.5.145:40185 to 197.255.124.14:1812 length 164
(3190) Fri Aug 18 10:01:08 2017: Debug: Cleaning up request packet ID
41 with timestamp +88694
(3191) Fri Aug 18 10:01:14 2017: Debug: Received Access-Request Id 40
from 10.1.5.145:40185 to 197.255.124.14:1812 length 164
(3191) Fri Aug 18 10:01:14 2017: Debug: Cleaning up request packet ID
40 with timestamp +88700
(3192) Fri Aug 18 10:01:20 2017: Debug: Received Access-Request Id 41
from 10.1.5.145:40185 to 197.255.124.14:1812 length 164
(3192) Fri Aug 18 10:01:20 2017: Debug: Cleaning up request packet ID
41 with timestamp +88706
*From: *Durand fabrice via PacketFence-users
<packetfence-users@lists.sourceforge.net>
*Reply-To: *"packetfence-users@lists.sourceforge.net"
<packetfence-users@lists.sourceforge.net>
*Date: *Friday, August 18, 2017 at 12:05 AM
*To: *"packetfence-users@lists.sourceforge.net"
<packetfence-users@lists.sourceforge.net>
*Cc: *Durand fabrice <fdur...@inverse.ca>
*Subject: *Re: [PacketFence-users] Packetfence-ZEN-7.2.0 bandwidth
violation not working
What is the result of:
ps -edf|grep radius
Regards
Fabrice
Le 2017-08-17 à 10:05, Emmanuel Togo a écrit :
Hello Fabrice,
Please see pf status below
/usr/local/pf/bin/pfcmd service pf status
service|shouldBeStarted|pid
carbon-cache|1|18793
carbon-relay|1|18814
collectd|1|18835
dhcpd|1|18873
haproxy|1|18649
httpd.aaa|1|18893
httpd.admin|1|18673
httpd.collector|1|18924
httpd.dispatcher|1|18947
httpd.graphite|1|18975
httpd.parking|1|19013
httpd.portal|1|19042
httpd.proxy|0|0
httpd.webservices|1|19078
iptables|1|-1
keepalived|0|0
p0f|1|0
pfbandwidthd|1|19122
pfdetect||0
pfdhcplistener|1|19153
pfdns|1|19184
pffilter|1|19210
pfmon|1|19237
pfqueue|1|19152
pfsetvlan|1|19280
pfsso|1|19339
radiusd-acct|1|19372
radiusd-auth|1|19408
radiusd-cli|1|19449
radsniff|1|0
redis_ntlm_cache|1|19509
redis_queue|1|19145
routes|1|-1
snmptrapd|1|19279
statsd|1|19563
winbindd|1|19922
*From: *Fabrice Durand <fdur...@inverse.ca>
<mailto:fdur...@inverse.ca>
*Date: *Thursday, August 17, 2017 at 1:46 PM
*To: *Emmanuel Togo <emat...@ug.edu.gh>
<mailto:emat...@ug.edu.gh>,
"packetfence-users@lists.sourceforge.net"
<mailto:packetfence-users@lists.sourceforge.net>
<packetfence-users@lists.sourceforge.net>
<mailto:packetfence-users@lists.sourceforge.net>
*Subject: *Re: [PacketFence-users] Packetfence-ZEN-7.2.0 bandwidth
violation not working
If radius accounting is not running then you will not be able to
receive radius accounting ...
So bandwidth violation not working will not work.
Le 2017-08-17 à 09:37, Emmanuel Togo a écrit :
Hello Fabrice,
Please see the error message after running raddebug -f
/usr/local/pf/run/radius-acct.sock -t 300
radmin: Failed connecting to
/usr/local/pf/run/radius-acct.sock: No such file or directory
Regards
Emmanuel
*From: *Fabrice Durand via PacketFence-users
<packetfence-users@lists.sourceforge.net>
<mailto:packetfence-users@lists.sourceforge.net>
*Reply-To: *"packetfence-users@lists.sourceforge.net"
<mailto:packetfence-users@lists.sourceforge.net>
<packetfence-users@lists.sourceforge.net>
<mailto:packetfence-users@lists.sourceforge.net>
*Date: *Thursday, August 17, 2017 at 12:18 PM
*To: *"packetfence-users@lists.sourceforge.net"
<mailto:packetfence-users@lists.sourceforge.net>
<packetfence-users@lists.sourceforge.net>
<mailto:packetfence-users@lists.sourceforge.net>
*Cc: *Fabrice Durand <fdur...@inverse.ca>
<mailto:fdur...@inverse.ca>
*Subject: *Re: [PacketFence-users] Packetfence-ZEN-7.2.0
bandwidth violation not working
raddebug ...
Le 2017-08-17 à 06:12, Emmanuel Togo a écrit :
Hello Fabrice,
raddebuf command is not available.
Regards
Emmanuel
------------------------------------------------------------------------
*From:*Durand fabrice via PacketFence-users
<packetfence-users@lists.sourceforge.net>
<mailto:packetfence-users@lists.sourceforge.net>
*Sent:* 26 July 2017 11:59 PM
*To:* packetfence-users@lists.sourceforge.net
<mailto:packetfence-users@lists.sourceforge.net>
*Cc:* Durand fabrice
*Subject:* Re: [PacketFence-users] Packetfence-ZEN-7.2.0
bandwidth violation not working
Hello Emmanuel,
it looks that there is just start in your accounting (a
way to send
interim update and stop from the AP/Switch ?).
Can you check with:
raddebuf -f /usr/local/pf/run/radius-acct.sock -t 300
and paste few requests ?
Regards
Fabrice
Le 2017-07-26 à 03:38, Emmanuel Togo via PacketFence-users
a écrit :
> Hello Fabrice,
> Thank you once again.
> The username in radacct_log is different from mac
address. See below the output
>
> MariaDB [pf]> select * from radacct_log where
username="sophos5";
>
+------+-------------------+----------+--------------+----------------+---------------------+-----------------+------------------+-----------------+----------------------------------+
> | id | acctsessionid | username | nasipaddress |
acctstatustype | timestamp | acctinputoctets |
acctoutputoctets | acctsessiontime |
acctuniqueid |
>
+------+-------------------+----------+--------------+----------------+---------------------+-----------------+------------------+-----------------+----------------------------------+
> | 772 | 0000002C-00000019 | sophos5 | 10.1.5.145 |
Start | 2017-07-20 02:54:44 | 0
| 0 | 0 |
c594c1423a7cde15a0d2ed85743f1d4a |
> | 793 | 0000002C-00000026 | sophos5 | 10.1.5.145 |
Start | 2017-07-20 09:56:48 | 0
| 0 | 0 |
22775775af347dee8d387e13406c5f5f |
> | 795 | 0000002C-00000027 | sophos5 | 10.1.5.145 |
Start | 2017-07-20 09:58:30 | 0
| 0 | 0 |
4ac58d4ddec42d583960a1982f32d62b |
> | 797 | 0000002C-00000028 | sophos5 | 10.1.5.145 |
Start | 2017-07-20 10:00:58 | 0
| 0 | 0 |
4ac58d4ddec42d583960a1982f32d62b |
> | 909 | 00010B4E-00000035 | sophos5 | 10.1.5.145 |
Start | 2017-07-20 15:03:04 | 0
| 0 | 0 |
22775775af347dee8d387e13406c5f5f |
> | 915 | 00010B4E-00000038 | sophos5 | 10.1.5.145 |
Start | 2017-07-20 15:25:21 | 0
| 0 | 0 |
22775775af347dee8d387e13406c5f5f |
> | 921 | 00010B4E-0000003C | sophos5 | 10.1.5.145 |
Start | 2017-07-20 15:40:29 | 0
| 0 | 0 |
22775775af347dee8d387e13406c5f5f |
> | 925 | 00010B4E-0000003F | sophos5 | 10.1.5.145 |
Start | 2017-07-20 15:46:58 | 0
| 0 | 0 |
22775775af347dee8d387e13406c5f5f |
> | 929 | 00010B4E-00000040 | sophos5 | 10.1.5.145 |
Start | 2017-07-20 15:51:01 | 0
| 0 | 0 |
22775775af347dee8d387e13406c5f5f |
> | 1008 | 00010B4E-00000064 | sophos5 | 10.1.5.145 |
Start | 2017-07-21 10:23:59 | 0
| 0 | 0 |
c594c1423a7cde15a0d2ed85743f1d4a |
> | 1038 | 00010B4E-00000073 | sophos5 | 10.1.5.145 |
Start | 2017-07-21 12:50:49 | 0
| 0 | 0 |
c594c1423a7cde15a0d2ed85743f1d4a |
> | 1232 | 00007844-0000000E | sophos5 | 10.1.5.145 |
Start | 2017-07-24 16:54:10 | 0
| 0 | 0 |
ce7983729464e2b0b3cf6174c4f9e837 |
> | 1286 | 00007844-00000028 | sophos5 | 10.1.5.145 |
Start | 2017-07-25 11:20:12 | 0
| 0 | 0 |
22775775af347dee8d387e13406c5f5f |
>
+------+-------------------+----------+--------------+----------------+---------------------+-----------------+------------------+-----------------+----------------------------------+
> 13 rows in set (0.00 sec)
>
>
> Regards
> Emmanuel
>
> On 7/26/17, 1:22 AM, "Durand fabrice via
PacketFence-users"
<packetfence-users@lists.sourceforge.net>
<mailto:packetfence-users@lists.sourceforge.net> wrote:
>
> an you do that:
>
> select * from radacct_log where
username="08:ee:8b:8c:2e:35";
>
> does it return something ?
>
>
> Le 2017-07-25 à 19:30, Emmanuel Togo via
PacketFence-users a écrit :
> > Hello Fabrice,
> >
> > Thank you. See the output below
> >
> >
+-------------------+-----------+------------+-----------+
> > | callingstationid | acctinput | acctoutput |
accttotal |
> >
+-------------------+-----------+------------+-----------+
> > | 08:ee:8b:8c:2e:35 | 0 | 0
| 0 |
> > | 10:2f:6b:7d:87:1b | 0 | 0
| 0 |
> > | 1c:23:2c:c2:7e:33 | 0 | 0
| 0 |
> > | 20:64:32:c8:18:7c | 0 | 0
| 0 |
> > | 30:c7:ae:68:2c:7c | 0 | 0
| 0 |
> > | 34:31:11:27:65:09 | 0 | 0
| 0 |
> > | 3c:83:75:c3:38:d9 | 0 | 0
| 0 |
> > | 48:5a:3f:84:75:64 | 0 | 0
| 0 |
> > | 64:89:9a:14:82:6f | 0 | 0
| 0 |
> > | 78:ff:ca:14:4d:e4 | 0 | 0
| 0 |
> > | 78:ff:ca:51:5e:d9 | 0 | 0
| 0 |
> > | 78:ff:ca:6d:97:bf | 0 | 0
| 0 |
> > | 84:2e:27:05:f5:9c | 0 | 0
| 0 |
> > | 84:38:38:6e:45:08 | 0 | 0
| 0 |
> > | a4:5e:60:f2:62:e5 | 0 | 0
| 0 |
> > | a8:bb:cf:05:1b:4c | 0 | 0
| 0 |
> > | ac:37:43:62:a1:8d | 0 | 0
| 0 |
> > | c0:bd:d1:2e:15:1e | 0 | 0
| 0 |
> > | c4:9a:02:8e:65:d4 | 0 | 0
| 0 |
> > | cc:5f:bf:2e:c2:5d | 0 | 0
| 0 |
> > | d0:22:be:d7:9b:ba | 0 | 0
| 0 |
> > | e8:4e:84:da:48:ed | 0 | 0
| 0 |
> > | f0:99:bf:28:f1:6c | 0 | 0
| 0 |
> > | f0:fc:97:c1:58:cf | 0 | 0
| 0 |
> >
+-------------------+-----------+------------+-----------+
> > 24 rows in set, 1 warning (0.00 sec)
> >
> > On 7/25/17, 11:05 PM, "Durand fabrice via
PacketFence-users"
<packetfence-users@lists.sourceforge.net>
<mailto:packetfence-users@lists.sourceforge.net> wrote:
> >
> > Hello Emmanuel,
> >
> > can you try that in mysql:
> >
> > SELECT radacct.callingstationid,
> > SUM(radacct_log.acctinputoctets) AS acctinput,
> > SUM(radacct_log.acctoutputoctets) AS acctoutput,
> >
SUM(radacct_log.acctinputoctets+radacct_log.acctoutputoctets)
AS accttotal
> > FROM radacct_log
> > RIGHT JOIN radacct ON
radacct_log.acctuniqueid =
> > radacct.acctuniqueid
> > WHERE DAY(timestamp) =
DAY(CURRENT_DATE()) AND timestamp >= ?
> > GROUP BY radacct.callingstationid
> > HAVING accttotal >= ?;
> >
> > and check if it return some mac address ?
(change ? by values)
> >
> > Regards
> >
> > Fabrice
> >
> >
> >
> > Le 2017-07-25 à 11:11, Emmanuel Togo via
PacketFence-users a écrit :
> > > Hello Fabrice,
> > > Yes I have.
> > >
> > > Jul 25 03:16:12 pf pfmon: pfmon(5757)
INFO: [mac:unknown] getting violations triggers for
accounting cleanup (pf::accounting::acct_maintenance)
> > > Jul 25 03:16:12 pf pfmon: pfmon(5757)
INFO: [mac:unknown] Found timeframed accounting policy :
TOT2MBD for violation 15000001
(pf::accounting::acct_maintenance)
> > >
> > > Regards
> > > Emmanuel
> > >
> > > On 7/25/17, 3:37 AM, "Durand fabrice via
PacketFence-users"
<packetfence-users@lists.sourceforge.net>
<mailto:packetfence-users@lists.sourceforge.net> wrote:
> > >
> > > Hello Emmanuel,
> > >
> > > do you have something related to
bandwidth violation in pfmon.log ?
> > >
> > > Regards
> > > Fabrice
> > >
> > > Le 2017-07-19 à 16:08, Emmanuel Togo
via PacketFence-users a écrit :
> > > > Hi All
> > > >
> > > > I have upgraded Packetfence-6.5.1
to Packetfence-7.2.0 and bandwidth
> > > > violation of 100MB/Day stop
working. Nothing happens when a client uses more than
> > > > 100MB traffic.
> > > >
> > > > Regards
> > > > Emmanuel
> > > >
> > > >
> > > > DISCLAIMER ------------------ NOTE:
This e-mail message is subject to the University of Ghana
email disclaimer see
http://www.ug.edu.gh/ugemaildisclaimer for disclaimer.
> > > >
------------------------------------------------------------------------------
> > > > Check out the vibrant tech
community on one of the world's most
> > > > engaging tech sites, Slashdot.org!
http://sdm.link/slashdot <http://sdm.link/slashdot>
> > > >
_______________________________________________
> > > > PacketFence-users mailing list
> > > >
PacketFence-users@lists.sourceforge.net
<mailto:PacketFence-users@lists.sourceforge.net>
> > > >
https://lists.sourceforge.net/lists/listinfo/packetfence-users
> > >
> > >
> > >
------------------------------------------------------------------------------
> > > Check out the vibrant tech community
on one of the world's most
> > > engaging tech sites, Slashdot.org!
http://sdm.link/slashdot <http://sdm.link/slashdot>
> > >
_______________________________________________
> > > PacketFence-users mailing list
> > > PacketFence-users@lists.sourceforge.net
<mailto:PacketFence-users@lists.sourceforge.net>
> > >
https://lists.sourceforge.net/lists/listinfo/packetfence-users
> > >
> > >
> > > DISCLAIMER ------------------ NOTE: This
e-mail message is subject to the University of Ghana email
disclaimer see http://www.ug.edu.gh/ugemaildisclaimer for
disclaimer.
> > >
------------------------------------------------------------------------------
> > > Check out the vibrant tech community on
one of the world's most
> > > engaging tech sites, Slashdot.org!
http://sdm.link/slashdot <http://sdm.link/slashdot>
> > >
_______________________________________________
> > > PacketFence-users mailing list
> > > PacketFence-users@lists.sourceforge.net
<mailto:PacketFence-users@lists.sourceforge.net>
> > >
https://lists.sourceforge.net/lists/listinfo/packetfence-users
> >
> >
> >
------------------------------------------------------------------------------
> > Check out the vibrant tech community on one
of the world's most
> > engaging tech sites, Slashdot.org!
http://sdm.link/slashdot <http://sdm.link/slashdot>
> > _______________________________________________
> > PacketFence-users mailing list
> > PacketFence-users@lists.sourceforge.net
<mailto:PacketFence-users@lists.sourceforge.net>
> >
https://lists.sourceforge.net/lists/listinfo/packetfence-users
> >
> >
> > DISCLAIMER ------------------ NOTE: This e-mail
message is subject to the University of Ghana email
disclaimer see http://www.ug.edu.gh/ugemaildisclaimer for
disclaimer.
> >
------------------------------------------------------------------------------
> > Check out the vibrant tech community on one of
the world's most
> > engaging tech sites, Slashdot.org!
http://sdm.link/slashdot
> > _______________________________________________
> > PacketFence-users mailing list
> > PacketFence-users@lists.sourceforge.net
<mailto:PacketFence-users@lists.sourceforge.net>
> >
https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
>
------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the
world's most
> engaging tech sites, Slashdot.org!
http://sdm.link/slashdot
> _______________________________________________
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
<mailto:PacketFence-users@lists.sourceforge.net>
>
https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
> DISCLAIMER ------------------ NOTE: This e-mail message
is subject to the University of Ghana email disclaimer see
http://www.ug.edu.gh/ugemaildisclaimer for disclaimer.
>
------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the
world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
<mailto:PacketFence-users@lists.sourceforge.net>
>
https://lists.sourceforge.net/lists/listinfo/packetfence-users
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's
most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
<mailto:PacketFence-users@lists.sourceforge.net>
https://lists.sourceforge.net/lists/listinfo/packetfence-users
DISCLAIMER ------------------ NOTE: This e-mail message is
subject to the University of Ghana email disclaimer see
http://www.ug.edu.gh/ugemaildisclaimer for disclaimer.
--
Fabrice Durand
fdur...@inverse.ca <mailto:fdur...@inverse.ca> :: +1.514.447.4918 (x135)
::www.inverse.ca <http://www.inverse.ca>
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and
PacketFence (http://packetfence.org)
DISCLAIMER ------------------ NOTE: This e-mail message is
subject to the University of Ghana email disclaimer see
http://www.ug.edu.gh/ugemaildisclaimer for disclaimer.
--
Fabrice Durand
fdur...@inverse.ca <mailto:fdur...@inverse.ca> :: +1.514.447.4918 (x135)
::www.inverse.ca <http://www.inverse.ca>
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
(http://packetfence.org)
DISCLAIMER ------------------ NOTE: This e-mail message is subject
to the University of Ghana email disclaimer see
http://www.ug.edu.gh/ugemaildisclaimer for disclaimer.
DISCLAIMER ------------------ NOTE: This e-mail message is subject to
the University of Ghana email disclaimer see
http://www.ug.edu.gh/ugemaildisclaimer for disclaimer.
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
