[PacketFence-users] FW: fail conect with new SSID

[Cuttler, Brian R (HEALTH) via PacketFence-users]

-----Original Message-----
From: Cuttler, Brian R (HEALTH) 
Sent: Thursday, August 4, 2022 10:40 AM
To: Zammit, Ludovic <luza...@akamai.com>
Subject: RE: [PacketFence-users] fail conect with new SSID

Can I use udp-reflector to send to both?

We were running it and sending to management port 1443, I have started a second 
instance sending to 767 and on the PF server I see traffic to both ports using 
tcpdump.

And I do see that we did log some traffic in the pfdhcplistener.log but it is 
not updating much, certainly not at the rate that we see incoming traffic via 
tcpdump, I had thought it was not updating at all.

Which is the correct socket to forward to, or should I always send to both?

I do see MAC addresses for dhcp clients that have no IP in PF in the dhcp log, 
so I know the clients have been active in the last day or so and can currently 
ping the IP.

Does the log only update when the information is new, or for all traffic?

Tail of log reads
[root@pkfn7 logs]# tail -f   pfdhcplistener.log
Aug 04 07:20:44 pfqueue(45717) INFO: [mac:unknown] Updating iplog and SSO for 
b0:a8:6e:4c:f5:c0 -> 10.50.172.27 (pf::dhcp::processor::handle_new_ip)
Aug 04 07:20:44 pfqueue(45717) INFO: [mac:unknown] DHCPREQUEST from 
a8:d0:e5:32:64:00 (10.50.172.25) (pf::dhcp::processor::parse_dhcp_request)
Aug 04 07:20:44 pfqueue(45717) INFO: [mac:unknown] The listener process is NOT 
on the same server as the DHCP server. (pf::dhcp::processor::pf_is_dhcp)
Aug 04 07:20:44 pfqueue(45717) INFO: [mac:unknown] Updating iplog and SSO for 
a8:d0:e5:32:64:00 -> 10.50.172.25 (pf::dhcp::processor::handle_new_ip)
Aug 04 07:20:44 pfqueue(45717) INFO: [mac:unknown] DHCPREQUEST from 
ac:4b:c8:07:df:00 (10.49.65.250) (pf::dhcp::processor::parse_dhcp_request)
Aug 04 07:20:44 pfqueue(45717) INFO: [mac:unknown] The listener process is NOT 
on the same server as the DHCP server. (pf::dhcp::processor::pf_is_dhcp)
Aug 04 07:20:44 pfqueue(45717) INFO: [mac:unknown] Updating iplog and SSO for 
ac:4b:c8:07:df:00 -> 10.49.65.250 (pf::dhcp::processor::handle_new_ip)
Aug 04 07:20:44 pfqueue(45717) INFO: [mac:unknown] DHCPREQUEST from 
b0:a8:6e:47:ee:c0 (10.50.172.28) (pf::dhcp::processor::parse_dhcp_request)
Aug 04 07:20:44 pfqueue(45717) INFO: [mac:unknown] The listener process is NOT 
on the same server as the DHCP server. (pf::dhcp::processor::pf_is_dhcp)
Aug 04 07:20:44 pfqueue(45717) INFO: [mac:unknown] Updating iplog and SSO for 
b0:a8:6e:47:ee:c0 -> 10.50.172.28 (pf::dhcp::processor::handle_new_ip)

Thank you,
Brian

-----Original Message-----
From: Zammit, Ludovic <luza...@akamai.com> 
Sent: Thursday, August 4, 2022 10:15 AM
To: Cuttler, Brian R (HEALTH) <brian.cutt...@health.ny.gov>
Cc: packetfence-users@lists.sourceforge.net
Subject: Re: [PacketFence-users] fail conect with new SSID

[You don't often get email from luza...@akamai.com. Learn why this is important 
at https://aka.ms/LearnAboutSenderIdentification ]

ATTENTION: This email came from an external source. Do not open attachments or 
click on links from unknown senders or unexpected emails.



_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users