Best way to capture RADIUS passwords

[Øystein Gyland]

On Fri, 2012-11-09 at 15:37 -0400, Chris Taylor wrote:

> I setup tcpdump to dump to a file (tcpdump -i eth0 -n -s0 port radius
> -w rad-capture.lpc) , but when I check it out with wireshark I am
> unable to see the password (just the username). Am I going about this
> the wrong way?

You can decrypt the password from the tcpdump capture with radsniff: 

 radsniff -I rad-capture.lpc -s <shared-secret>



-- 
Øystein