<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.6001.18865">
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT size=2 face=Arial>In testing the new 2.1.8 for accounting packets I
have discovered the following strange situation,</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>There are 2 radius servers (radius-a and
radius-b).</FONT></DIV>
<DIV><FONT size=2 face=Arial>Each server will relay packets it receives to the
other server. (Currently only accounting packets are being
received)</FONT></DIV>
<DIV><FONT size=2 face=Arial>The packets are collected in detail-relay
file.</FONT></DIV>
<DIV><FONT size=2 face=Arial>The packets are then relayed via the
sites/enabled/copy-acct-to-home-server config.</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>What I observe is a single packet being read from
the detail-relay.work file on radius-b and being sent radius-a.</FONT></DIV>
<DIV><FONT size=2 face=Arial>I do not see any response from radius-a being
returned to radius-b. </FONT></DIV>
<DIV><FONT size=2 face=Arial>After what seems to be about 30 seconds the packet
is resent from radius-b to radius-a. Again and again...</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>On radius-b the following messages are logged
(status_check = status-server)....</FONT></DIV>
<BLOCKQUOTE style="MARGIN-RIGHT: 0px" dir=ltr>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>Mon Jan 4 10:10:15 2010 : Info: rlm_sql
(sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked<BR>Mon
Jan 4 10:10:15 2010 : Info: rlm_sql (sql): Attempting to connect to <A
href="mailto:radiusd@localhost:/radius">radiusd@localhost:/radius</A> <BR>Mon
Jan 4 10:10:15 2010 : Info: rlm_sql_mysql: Starting connect to MySQL
server for #0<BR>Mon Jan 4 10:10:15 2010 : Info: rlm_sql_mysql: Starting
connect to MySQL server for #1<BR>Mon Jan 4 10:10:15 2010 : Info:
rlm_sql_mysql: Starting connect to MySQL server for #2<BR>Mon Jan 4
10:10:15 2010 : Info: rlm_sql_mysql: Starting connect to MySQL server for
#3<BR>Mon Jan 4 10:10:15 2010 : Info: rlm_sql_mysql: Starting connect to
MySQL server for #4<BR>Mon Jan 4 10:10:15 2010 : Info: Loaded virtual
server inner-tunnel<BR>Mon Jan 4 10:10:15 2010 : Info: Loaded virtual
server copy-acct-to-home-server<BR>Mon Jan 4 10:10:15 2010 : Info:
Loaded virtual server <default><BR>Mon Jan 4 10:10:15 2010 : Info:
Ready to process requests.<BR>Mon Jan 4 10:10:42 2010 : Proxy: Marking
home server 192.168.1.225 port 1813 as zombie (it looks like it is
dead).<BR>Mon Jan 4 10:10:42 2010 : Proxy: Received response to status
check 5938 (1 in current sequence)<BR>Mon Jan 4 10:11:11 2010 : Proxy:
Received response to status check 6013 (2 in current sequence)<BR>Mon
Jan 4 10:11:40 2010 : Proxy: Received response to status check 6048 (3
in current sequence)<BR>Mon Jan 4 10:11:40 2010 : Proxy: Marking home
server 192.168.1.225 port 1813 alive<BR>Mon Jan 4 10:11:43 2010 : Proxy:
Marking home server 192.168.1.225 port 1813 as zombie (it looks like it is
dead).<BR>Mon Jan 4 10:11:43 2010 : Proxy: Received response to status
check 6051 (4 in current sequence)<BR>Mon Jan 4 10:11:43 2010 : Proxy:
Marking home server 192.168.1.225 port 1813 alive<BR>Mon Jan 4 10:12:13
2010 : Proxy: Marking home server 192.168.1.225 port 1813 as zombie (it looks
like it is dead).<BR>Mon Jan 4 10:12:13 2010 : Proxy: Received response
to status check 6086 (5 in current sequence)<BR>Mon Jan 4 10:12:13 2010
: Proxy: Marking home server 192.168.1.225 port 1813 alive<BR>Mon Jan 4
10:12:44 2010 : Proxy: Marking home server 192.168.1.225 port 1813 as zombie
(it looks like it is dead).<BR>Mon Jan 4 10:12:44 2010 : Proxy: Received
response to status check 6118 (6 in current sequence)<BR>Mon Jan 4
10:12:44 2010 : Proxy: Marking home server 192.168.1.225 port 1813
alive<BR>Mon Jan 4 10:13:14 2010 : Proxy: Marking home server
192.168.1.225 port 1813 as zombie (it looks like it is dead).<BR>Mon Jan
4 10:13:14 2010 : Proxy: Received response to status check 6153 (7 in current
sequence)<BR>Mon Jan 4 10:13:14 2010 : Proxy: Marking home server
192.168.1.225 port 1813 alive</FONT></DIV></BLOCKQUOTE>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>On radius-a for the same time frame...</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<BLOCKQUOTE style="MARGIN-RIGHT: 0px" dir=ltr>
<DIV><FONT size=2 face=Arial>Mon Jan 4 10:11:55 2010 : Proxy: Marking
home server 192.168.1.226 port 1813 as zombie (it looks like it is
dead).<BR>Mon Jan 4 10:11:55 2010 : Proxy: Received response to status
check 669399 (6 in current sequence)<BR>Mon Jan 4 10:11:55 2010 : Proxy:
Marking home server 192.168.1.226 port 1813 alive</FONT></DIV></BLOCKQUOTE>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>I then tried using the alternate "status_check
= request " method, but I think I have it configured incorrectly since it
is also not receiving a reply...</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<BLOCKQUOTE style="MARGIN-RIGHT: 0px" dir=ltr>
<DIV><FONT size=2 face=Arial>Mon Jan 4 11:52:16 2010 : Info: rlm_sql
(sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked<BR>Mon
Jan 4 11:52:16 2010 : Info: rlm_sql (sql): Attempting to connect to <A
href="mailto:radiusd@localhost:/radius">radiusd@localhost:/radius</A><BR>Mon
Jan 4 11:52:16 2010 : Info: rlm_sql_mysql: Starting connect to MySQL
server for #0<BR>Mon Jan 4 11:52:16 2010 : Info: rlm_sql_mysql: Starting
connect to MySQL server for #1<BR>Mon Jan 4 11:52:16 2010 : Info:
rlm_sql_mysql: Starting connect to MySQL server for #2<BR>Mon Jan 4
11:52:16 2010 : Info: rlm_sql_mysql: Starting connect to MySQL server for
#3<BR>Mon Jan 4 11:52:16 2010 : Info: rlm_sql_mysql: Starting connect to
MySQL server for #4<BR>Mon Jan 4 11:52:16 2010 : Info: Loaded virtual
server inner-tunnel<BR>Mon Jan 4 11:52:16 2010 : Info: Loaded virtual
server copy-acct-to-home-server<BR>Mon Jan 4 11:52:16 2010 : Info:
Loaded virtual server <default><BR>Mon Jan 4 11:52:16 2010 : Info:
Ready to process requests.<BR>Mon Jan 4 11:52:43 2010 : Proxy: Marking
home server 192.168.1.225 port 1813 as zombie (it looks like it is
dead).<BR>Mon Jan 4 11:52:44 2010 : Info: [sql] stop packet with zero
session length. [user 'test_user_please_reject_me', nas
'192.168.1.226']<BR>Mon Jan 4 11:52:47 2010 : Error: No response to
status check 5969 for home server 192.168.1.225 port 1813<BR>Mon Jan 4
11:53:13 2010 : Info: [sql] stop packet with zero session length. [user
'test_user_please_reject_me', nas '192.168.1.226']<BR>Mon Jan 4 11:53:16
2010 : Error: No response to status check 6007 for home server 192.168.1.225
port 1813<BR>Mon Jan 4 11:53:43 2010 : Proxy: Marking home server
192.168.1.225 port 1813 as dead.<BR>Mon Jan 4 11:53:46 2010 : Info:
[sql] stop packet with zero session length. [user
'test_user_please_reject_me', nas '192.168.1.226']</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial> on radius-a, for
status_check=request I added to acct_user,</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>
test_user_please_reject_me Auth-Type :=
Reject<BR> Reply-Message = "Status
check only",<BR> Fall-Through =
No</FONT></DIV></BLOCKQUOTE>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>I suspect I SHOULD be using
status_check=status-server.</FONT></DIV>
<DIV><FONT size=2 face=Arial>Which then leads to why my server keeps getting
marked as zombie/dead/alive....</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>It seems like the accounting stop packet being sent
is not generating a reply...?</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>Below is the only packet being sent... again and
again....</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<BLOCKQUOTE style="MARGIN-RIGHT: 0px" dir=ltr>
<DIV><FONT size=2 face=Arial>Mon Jan 4 11:53:45
2010<BR> Acct-Status-Type =
Stop<BR> User-Name = "<A
href="mailto:not_real_id@somerealm">not_real_id@somerealm</A>"<BR>
Event-Timestamp = "Dec 31 2009 15:41:36
DST"<BR> Acct-Delay-Time =
331887<BR> NAS-Identifier =
"ERX-2"<BR> Acct-Session-Id =
"0378168264"<BR> NAS-IP-Address =
192.168.1.101<BR> Service-Type =
Framed-User<BR> Framed-Protocol =
PPP<BR> Framed-Compression =
None<BR> ERX-Pppoe-Description =
"pppoe 00:1d:68:ec:ee:64"<BR>
Framed-IP-Address =
66.247.201.49<BR> Framed-IP-Netmask
= 255.255.255.255<BR>
ERX-Ingress-Policy-Name =
"SOMEREALM_UP"<BR>
ERX-Egress-Policy-Name =
"SOMEREALM_DOWN"<BR>
Calling-Station-Id =
"ERX-08000000283"<BR>
Acct-Input-Gigawords = 0<BR>
Acct-Input-Octets = 96<BR>
Acct-Output-Gigawords = 0<BR>
Acct-Output-Octets = 60<BR>
ERX-Input-Gigapkts = 0<BR>
Acct-Input-Packets = 0<BR>
ERX-Output-Gigapkts = 0<BR>
Acct-Output-Packets = 0<BR>
NAS-Port-Type = Ethernet<BR>
NAS-Port = 2147483931<BR>
NAS-Port-Id = "GigabitEthernet
8/0.283:283"<BR> Acct-Authentic =
RADIUS<BR> Acct-Session-Time =
0<BR> Acct-Terminate-Cause =
User-Request<BR> Proxy-State =
0x3534313734<BR>
Acct-Unique-Session-Id =
"038113f04620fe75"<BR> Timestamp =
1262620425<BR> Request-Authenticator
= Verified</FONT></DIV></BLOCKQUOTE>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>I'm not certain what additional info would be
helpful at this point.</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>Thanks,</FONT></DIV>
<DIV><FONT size=2 face=Arial>-craig</FONT></DIV>
<DIV>
<DIV class=Section1>
<P style="mso-layout-grid-align: none" class=MsoNormal><I><SPAN
style="mso-ansi-language: EN-US">
<HR>
Craig Campbell <BR><A
href="mailto:craig.campbell@ccraft.ca">craig.campbell@ccraft.ca</A>
<BR>CampbellCraft Consulting Inc<BR>2 Kenny Court <BR>Whitby, Ontario <BR>Canada
<BR>L1R 2L8 <BR>905 922-2789
<P></P>
<P class=MsoNormal><SPAN lang=EN-CA> <?xml:namespace prefix = o
/><o:p></o:p></SPAN></P></DIV></SPAN></I></DIV><BR>
<BR>
__________ Information from ESET Smart Security, version of virus signature database 4743 (20100104) __________<BR>
<BR>
The message was checked by ESET Smart Security.<BR>
<BR>
<A HREF="http://www.eset.com">http://www.eset.com</A><BR>
</BODY></HTML>