Nigel,

The trace you analyze here doesn't match the DTrace printout that Frank 
sent -- his DTrace output shows SessionType=Normal and this trace has 
SessionType=Discovery.   Is there a SessionType=Normal trace later on in 
the output?

In fact, this trace looks pretty normal for the Discovery session that 
is used during SendTargets discovery, except that the initiators I am 
most familiar with rarely send the AuthMethod=CHAP during the Discovery 
session, but only in the SessionType=Normal session that is used when 
the initiator actually logs into the target.

Just in case it is helpful, here is a pointer the blog entry I wrote up 
about Solaris iscsitgtd RADIUS and CHAP configuration.
http://blogs.sun.com/honeycombinagarden/entry/solaris_iscsi_chap_and_radius

Peter

Nigel Smith wrote:
> Hello Frank,
> When doing the 'snoop', I find it best to filter on tcp port 3260
> traffic, like this:
>
>   # snoop -d {device} -o {filename} tcp port 3260
>
> That way you only capture the iscsi traffic, and avoid
> collecting a load of SSH traffic on tcp port 22, like you
> have just done.
>
> But no real problem, as you can easily filter out the non
> interesting TCP streams with Ethereal or WireShark,
> using 'Analyze > Follow TCP Stream'.
>
> Ok, so what do we see in your snoop capture:
>
> Packet #25: Initiator -> Target: Login
>   SessionType=Discovery
>   AuthMethod=CHAP
>   InitiatorName=iqn.2005-03.com.sns:mac-manul-pordss-macboo
>
> Packet #27/28: Target->Initiator: login Response
>   (Success)
>   AuthMethod=None
>
> Packet #31: Initiator -> Target: Login
>   HeaderDigest=None
>   DataDigest=None
>
> Packet #33/34/35: Target->Initiator: Login Response
>   (Success)
>   HeaderDigest=None
>   DataDigest=None
>
> Packet #39: Initiator -> Target: Text Command
>   SendTargets=All
>
> Packet #40/41: Target->Initiator: Text Response
>   TargetName=iqn.1986-03.com.sun:02:25515cb7-069d-e4a2-c701-82ef4809bffb
>   TargetAddress=192.168.1.100,1
>   TargetAddress=0.0.0.0,1
>   TargetAddress=[fe80::2e0:81ff:fe57:11d0],1
>
> Packet #44: Initiator -> Target: Logout
>   (Immediate Delivery - Close Session)
>
> Packet #45: Target->Initiator: Logout Response
>   (Connection Closed Sucessfully)
>
> So my initial guess would be that the Initiator does not
> like the 'Text response' (Packets 40/41) from the Target,
> as the Initiator imediately decides to Logout!
> (Although there also seem a low  number of Key/Value pairs
> during the login.)
>
> Regards
> Nigel Smith
>   
_______________________________________________
storage-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/storage-discuss

Reply via email to