Hello William -
An Accounting-Response is exactly that - the response that Radiator
sends back to the NAS to let it know that the Accounting-Request was
correctly received (the radius protocol is based on UDP, hence the
requirement for the "Ack").
What you show below is a retransmission of an accounting packet
because the NAS either did not receive the initial
Accounting-Response, or it did not understand it or process it
correctly.
You can see that an Accounting-Request is a retransmission by the
presence of a non-zero Acct-Delay-Time attribute. In this case the
second packet has an Acct-Delay-Time = 60, which indicates that this
packet is being retransmitted 60 seconds after the first.
Note that an Accounting-Response does not usually contain any reply attributes.
hth
Hugh
At 16:30 -0400 01/9/4, William Hernandez wrote:
>Hello everyone,
>
>I'm trying to trace a problem that causes multiple accounting
>stop records to be written to my /var/log/radacct/detail. The
>following is an excerpt from Trace 4. I don't know how to
>interpret the Accounting-Response. I see an Identifier that
>matches the Identifier in the Accounting-Request, and an
>Authentic that matches the Authentic in the Accounting-Request.
>But there are no Attributes.
>
>Is the Accounting-Response an accept, a reject, or something
>else?
>
>Thanks in advance,
>William
>
>Mon Aug 27 14:21:28 2001: DEBUG: Packet dump:
>*** Received from 208.249.78.11 port 1813 ....
>Code: Accounting-Request
>Identifier: 48
>Authentic:
><235><208>?i<20><214><167><135>O<26><225><231><226>?K(
>Attributes:
> User-Name = "angelmoran"
> NAS-IP-Address = 208.249.78.11
> NAS-Identifier = "208.249.78.11"
> Acct-Status-Type = Stop
> Acct-Session-Id = "19726770"
> Acct-Delay-Time = 0
> Acct-Authentic = RADIUS
> Service-Type = Framed-User
> NAS-Port-Type = Async
> NAS-Port = 309
> USR-Modem-Training-Time = 19
> USR-Interface-Index = 1565
> Chassis-Call-Slot = 2
> Chassis-Call-Span = 2
> Chassis-Call-Channel = 53
> Unauthenticated-Time = 4
> Calling-Station-Id = ""
> Called-Station-Id = "6415050"
> VPN-ID = 0
> Modulation-Type = v90Digital
> Simplified-MNP-Levels = ccittV42SREJ
> Simplified-V42bis-Usage = ccittV42bis
> Connect-Speed = 50666_BPS
> Framed-Protocol = PPP
> Framed-IP-Address = 66.110.2.6
> VTS-Session-Key =
>"<127><26><0>s<153>\<203>9<203><158><207>U<164><28>K<205>"
> Call-Arrived-time = 178478142
> Call-Lost-time = 178482088
> Acct-Session-Time = 3927
> Acct-Terminate-Cause = User-Request
> Disconnect-Reason = 8
> Speed-Of-Connection = 50666
> Acct-Input-Octets = 790359
> Acct-Output-Octets = 5495203
> Acct-Input-Packets = 11831
> Acct-Output-Packets = 14021
>
>Mon Aug 27 14:21:28 2001: DEBUG: Check if Handler
>Realm=surfea.net should be used to handle this request
>Mon Aug 27 14:21:28 2001: DEBUG: Check if Handler
>Realm=prwebtv.net should be used to handle this request
>Mon Aug 27 14:21:28 2001: DEBUG: Check if Handler
>Realm=holaplaneta.net should be used to handle this request
>Mon Aug 27 14:21:28 2001: DEBUG: Check if Handler
>Realm=prdigital.com should be used to handle this request
>Mon Aug 27 14:21:28 2001: DEBUG: Check if Handler
>Called-Station-Id=/5050$/ should be used to handle this request
>Mon Aug 27 14:21:28 2001: DEBUG: Handling request with Handler
>'Called-Station-Id=/5050$/'
>Mon Aug 27 14:21:28 2001: DEBUG: Rewrote user name to
>[EMAIL PROTECTED]
>Mon Aug 27 14:21:28 2001: DEBUG: prdigital-sessiondb Deleting
>session for angelmoran, 208.249.78.11, 309
>Mon Aug 27 14:21:28 2001: DEBUG: do query is: delete from
>RADONLINE where NASIDENTIFIER='208.249.78.11' and NASPORT=0309
>
>Mon Aug 27 14:21:28 2001: DEBUG: Handling with Radius::AuthSQL
>Mon Aug 27 14:21:28 2001: DEBUG: Handling accounting with
>Radius::AuthSQL
>Mon Aug 27 14:21:28 2001: DEBUG: Processing
>PostAuthHook:setSessionTimeout
>Mon Aug 27 14:21:28 2001: DEBUG: setSessionTimeout: username is:
>[EMAIL PROTECTED]
>Mon Aug 27 14:21:28 2001: DEBUG: setSessionTimeout:
>Called-Station-Id is: 6415050
>Mon Aug 27 14:21:28 2001: DEBUG: Accounting accepted
>Mon Aug 27 14:21:28 2001: DEBUG: Packet dump:
>*** Sending to 208.249.78.11 port 1813 ....
>Code: Accounting-Response
>Identifier: 48
>Authentic:
><235><208>?i<20><214><167><135>O<26><225><231><226>?K(
>Attributes:
>
>Mon Aug 27 14:22:28 2001: DEBUG: Packet dump:
>*** Received from 208.249.78.11 port 1813 ....
>Code: Accounting-Request
>Identifier: 74
>Authentic:
><195><161><215>Y<134><159>n2k<142><131>!<6>Y<189><236>
>Attributes:
> User-Name = "angelmoran"
> NAS-IP-Address = 208.249.78.11
> NAS-Identifier = "208.249.78.11"
> Acct-Status-Type = Stop
> Acct-Session-Id = "19726770"
> Acct-Delay-Time = 60
> Acct-Authentic = RADIUS
> Service-Type = Framed-User
> NAS-Port-Type = Async
> NAS-Port = 309
> USR-Modem-Training-Time = 19
> USR-Interface-Index = 1565
> Chassis-Call-Slot = 2
> Chassis-Call-Span = 2
> Chassis-Call-Channel = 53
> Unauthenticated-Time = 4
> Calling-Station-Id = ""
> Called-Station-Id = "6415050"
> VPN-ID = 0
> Modulation-Type = v90Digital
> Simplified-MNP-Levels = ccittV42SREJ
> Simplified-V42bis-Usage = ccittV42bis
> Connect-Speed = 50666_BPS
> Framed-Protocol = PPP
> Framed-IP-Address = 66.110.2.6
> VTS-Session-Key =
>"<127><26><0>s<153>\<203>9<203><158><207>U<164><28>K<205>"
> Call-Arrived-time = 178478142
> Call-Lost-time = 178482088
> Acct-Session-Time = 3927
> Acct-Terminate-Cause = User-Request
> Disconnect-Reason = 8
> Speed-Of-Connection = 50666
> Acct-Input-Octets = 790359
> Acct-Output-Octets = 5495203
> Acct-Input-Packets = 11831
> Acct-Output-Packets = 14021
>
>Mon Aug 27 14:22:28 2001: DEBUG: Check if Handler
>Realm=surfea.net should be used to handle this request
>Mon Aug 27 14:22:28 2001: DEBUG: Check if Handler
>Realm=prwebtv.net should be used to handle this request
>Mon Aug 27 14:22:28 2001: DEBUG: Check if Handler
>Realm=holaplaneta.net should be used to handle this request
>Mon Aug 27 14:22:28 2001: DEBUG: Check if Handler
>Realm=prdigital.com should be used to handle this request
>Mon Aug 27 14:22:28 2001: DEBUG: Check if Handler
>Called-Station-Id=/5050$/ should be used to handle this request
>Mon Aug 27 14:22:28 2001: DEBUG: Handling request with Handler
>'Called-Station-Id=/5050$/'
>Mon Aug 27 14:22:28 2001: DEBUG: Rewrote user name to
>[EMAIL PROTECTED]
>Mon Aug 27 14:22:28 2001: DEBUG: prdigital-sessiondb Deleting
>session for angelmoran, 208.249.78.11, 309
>Mon Aug 27 14:22:28 2001: DEBUG: do query is: delete from
>RADONLINE where NASIDENTIFIER='208.249.78.11' and NASPORT=0309
>
>Mon Aug 27 14:22:28 2001: DEBUG: Handling with Radius::AuthSQL
>Mon Aug 27 14:22:28 2001: DEBUG: Handling accounting with
>Radius::AuthSQL
>Mon Aug 27 14:22:28 2001: DEBUG: Processing
>PostAuthHook:setSessionTimeout
>Mon Aug 27 14:22:28 2001: DEBUG: setSessionTimeout: username is:
>[EMAIL PROTECTED]
>Mon Aug 27 14:22:28 2001: DEBUG: setSessionTimeout:
>Called-Station-Id is: 6415050
>Mon Aug 27 14:22:28 2001: DEBUG: Accounting accepted
>Mon Aug 27 14:22:28 2001: DEBUG: Packet dump:
>*** Sending to 208.249.78.11 port 1813 ....
>Code: Accounting-Response
>Identifier: 74
>Authentic:
><195><161><215>Y<134><159>n2k<142><131>!<6>Y<189><236>
>Attributes:
>
>===
>Archive at http://www.open.com.au/archives/radiator/
>Announcements on [EMAIL PROTECTED]
>To unsubscribe, email '[EMAIL PROTECTED]' with
>'unsubscribe radiator' in the body of the message.
--
NB: I am travelling this week, so there may be delays in our correspondence.
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
