[2.3.2-RELEASE][root@pfsense-router.scilek.net]/root: tcpdump -n -vvv -i em1 src or dst host 192.168.2.1 or 192.168.2.3 and src or dst port 1812 or 1813 tcpdump: listening on em1, link-type EN10MB (Ethernet), capture size 65535 bytes 05:40:14.519912 IP (tos 0x0, ttl 64, id 65502, offset 0, flags [none], proto UDP (17), length 110) 192.168.2.3.50336 > 192.168.2.1.1813: [udp sum ok] RADIUS, length: 82 Accounting Request (4), id: 0x00, Authenticator: 74246dc4909dea50cba8da07f6f0d357 Accounting Status Attribute (40), length: 6, Value: Accounting-On 0x0000: 0000 0007 Accounting Authentication Attribute (45), length: 6, Value: RADIUS 0x0000: 0000 0001 NAS ID Attribute (32), length: 14, Value: 802aa8ac1ef9 0x0000: 3830 3261 6138 6163 3165 6639 Called Station Attribute (30), length: 30, Value: 80-2A-A8-AD-1E-F9:SCILEK.NET 0x0000: 3830 2d32 412d 4138 2d41 442d 3145 2d46 0x0010: 393a 5343 494c 454b 2e4e 4554 Accounting Termination Cause Attribute (49), length: 6, Value: NAS Reboot 0x0000: 0000 000b 05:40:14.786213 IP (tos 0x0, ttl 64, id 40005, offset 0, flags [none], proto UDP (17), length 48) 192.168.2.1.1813 > 192.168.2.3.50336: [bad udp cksum 0x8582 -> 0x92f4!] RADIUS, length: 20 Accounting Response (5), id: 0x00, Authenticator: f25b6b6652babca442f8c01eefe9b680 05:41:53.513835 IP (tos 0x0, ttl 64, id 65503, offset 0, flags [none], proto UDP (17), length 191) 192.168.2.3.49969 > 192.168.2.1.1812: [udp sum ok] RADIUS, length: 163 Access Request (1), id: 0x01, Authenticator: cea65af69130dde8ad34067a330203c8 Username Attribute (1), length: 8, Value: scilek 0x0000: 7363 696c 656b NAS ID Attribute (32), length: 14, Value: 802aa8ac1ef9 0x0000: 3830 3261 6138 6163 3165 6639 NAS Port Attribute (5), length: 6, Value: 0 0x0000: 0000 0000 Called Station Attribute (30), length: 30, Value: 80-2A-A8-AD-1E-F9:SCILEK.NET 0x0000: 3830 2d32 412d 4138 2d41 442d 3145 2d46 0x0010: 393a 5343 494c 454b 2e4e 4554 Calling Station Attribute (31), length: 19, Value: 00-22-FA-F5-B9-0A 0x0000: 3030 2d32 322d 4641 2d46 352d 4239 2d30 0x0010: 41 Framed MTU Attribute (12), length: 6, Value: 1400 0x0000: 0000 0578 NAS Port Type Attribute (61), length: 6, Value: Wireless - IEEE 802.11 0x0000: 0000 0013 Connect Info Attribute (77), length: 23, Value: CONNECT 0Mbps 802.11b 0x0000: 434f 4e4e 4543 5420 304d 6270 7320 3830 0x0010: 322e 3131 62 EAP Message Attribute (79), length: 13, Value: .i 0x0000: 0269 000b 0173 6369 6c65 6b Message Authentication Attribute (80), length: 18, Value: t..J.0.zSO....>. 0x0000: 74ed f84a f030 b37a 534f bcd9 07ca 3e06 05:41:53.547071 IP (tos 0x0, ttl 64, id 24082, offset 0, flags [none], proto UDP (17), length 98) 192.168.2.1.1812 > 192.168.2.3.49969: [bad udp cksum 0x85b4 -> 0x0c05!] RADIUS, length: 70 Access Challenge (11), id: 0x01, Authenticator: d5cd7bd31f2e96613179209468050f3a Session Timeout Attribute (27), length: 6, Value: 10:00 min 0x0000: 0000 0258 EAP Message Attribute (79), length: 8, Value: .j 0x0000: 016a 0006 1520 Message Authentication Attribute (80), length: 18, Value: Wj.[...Ul....... 0x0000: 576a 165b daab 8455 6c8f f6be 9b04 ff81 State Attribute (24), length: 18, Value: .?.2.U...&....&I 0x0000: ba3f 8732 ba55 9297 c826 ab9a e9cc 2649 05:41:53.558155 IP (tos 0x0, ttl 64, id 65504, offset 0, flags [none], proto UDP (17), length 254) 192.168.2.3.49969 > 192.168.2.1.1812: [udp sum ok] RADIUS, length: 226 Access Request (1), id: 0x02, Authenticator: ef6372470998b01666dcd1ec1af8be1a Username Attribute (1), length: 8, Value: scilek 0x0000: 7363 696c 656b NAS ID Attribute (32), length: 14, Value: 802aa8ac1ef9 0x0000: 3830 3261 6138 6163 3165 6639 NAS Port Attribute (5), length: 6, Value: 0 0x0000: 0000 0000 Called Station Attribute (30), length: 30, Value: 80-2A-A8-AD-1E-F9:SCILEK.NET 0x0000: 3830 2d32 412d 4138 2d41 442d 3145 2d46 0x0010: 393a 5343 494c 454b 2e4e 4554 Calling Station Attribute (31), length: 19, Value: 00-22-FA-F5-B9-0A 0x0000: 3030 2d32 322d 4641 2d46 352d 4239 2d30 0x0010: 41 Framed MTU Attribute (12), length: 6, Value: 1400 0x0000: 0000 0578 NAS Port Type Attribute (61), length: 6, Value: Wireless - IEEE 802.11 0x0000: 0000 0013 Connect Info Attribute (77), length: 23, Value: CONNECT 0Mbps 802.11b 0x0000: 434f 4e4e 4543 5420 304d 6270 7320 3830 0x0010: 322e 3131 62 EAP Message Attribute (79), length: 58, Value: .j 0x0000: 026a 0038 1500 1603 0100 2d01 0000 2903 0x0010: 012e c088 aaf7 ca3e 9706 0822 97b0 2b5d 0x0020: 3dd6 eab5 8840 36d2 6f77 2e54 e929 82d0 0x0030: af00 0002 000a 0100 State Attribute (24), length: 18, Value: .?.2.U...&....&I 0x0000: ba3f 8732 ba55 9297 c826 ab9a e9cc 2649 Message Authentication Attribute (80), length: 18, Value: $......`.T..]iC. 0x0000: 24b1 f6bc 8ffa 1660 1f54 de04 5d69 43c4 05:41:53.573737 IP (tos 0x0, ttl 64, id 16094, offset 0, flags [none], proto UDP (17), length 1118) 192.168.2.1.1812 > 192.168.2.3.49969: [bad udp cksum 0x89b0 -> 0x7e0c!] RADIUS, length: 1090 Access Challenge (11), id: 0x02, Authenticator: 476be67dc40c47673e64bbb3bb18f308 EAP Message Attribute (79), length: 255, Value: .k. 0x0000: 016b 0400 15c0 0000 092d 1603 0100 4a02 0x0010: 0000 4603 0100 8886 78db 0d43 6317 a01b 0x0020: 2be3 945f 93f7 019a 5c4d 36a2 5e41 ac24 0x0030: f57c 64e8 f820 cfcf 92bc e932 8eef 2bb9 0x0040: f840 1fe3 de60 812b 0937 bd1d 4da0 2e54 0x0050: 6ba8 39e6 d3c1 000a 0016 0301 08d0 0b00 0x0060: 08cc 0008 c900 03de 3082 03da 3082 02c2 0x0070: a003 0201 0202 0101 300d 0609 2a86 4886 0x0080: f70d 0101 0b05 0030 8193 310b 3009 0603 0x0090: 5504 0613 0246 5231 0f30 0d06 0355 0408 0x00a0: 0c06 5261 6469 7573 3112 3010 0603 5504 0x00b0: 070c 0953 6f6d 6577 6865 7265 3115 3013 0x00c0: 0603 5504 0a0c 0c45 7861 6d70 6c65 2049 0x00d0: 6e63 2e31 2030 1e06 092a 8648 86f7 0d01 0x00e0: 0901 1611 6164 6d69 6e40 6578 616d 706c 0x00f0: 652e 636f 6d31 2630 2406 0355 04 EAP Message Attribute (79), length: 255, Value: ...Example Certificate Authority0...170109192513Z..180109192513Z0|1.0...U....FR1.0...U....Radius1.0...U....Example Inc.1#0!..U....Example Server Certificate1 0...*.H........admin@example.com0.."0...*.H....... 0x0000: 030c 1d45 7861 6d70 6c65 2043 6572 7469 0x0010: 6669 6361 7465 2041 7574 686f 7269 7479 0x0020: 301e 170d 3137 3031 3039 3139 3235 3133 0x0030: 5a17 0d31 3830 3130 3931 3932 3531 335a 0x0040: 307c 310b 3009 0603 5504 0613 0246 5231 0x0050: 0f30 0d06 0355 0408 0c06 5261 6469 7573 0x0060: 3115 3013 0603 5504 0a0c 0c45 7861 6d70 0x0070: 6c65 2049 6e63 2e31 2330 2106 0355 0403 0x0080: 0c1a 4578 616d 706c 6520 5365 7276 6572 0x0090: 2043 6572 7469 6669 6361 7465 3120 301e 0x00a0: 0609 2a86 4886 f70d 0109 0116 1161 646d 0x00b0: 696e 4065 7861 6d70 6c65 2e63 6f6d 3082 0x00c0: 0122 300d 0609 2a86 4886 f70d 0101 0105 0x00d0: 0003 8201 0f00 3082 010a 0282 0101 00b4 0x00e0: 9d62 ff28 1541 ed63 615f e14b c91d a7af 0x00f0: 29fd 8942 f19f d379 bfcf d9fd ad EAP Message Attribute (79), length: 255, Value: c.I...Y./.u.7._.......e...+.3h.a......g.u.....k.6?.O..Ab|..w}....Kh=.%..q'.D-..p..G(..*. W..!./3l..0..*...^.k. 0x0000: 63ff 49e7 0eb7 59e4 2fb6 75e7 3795 5fa4 0x0010: c987 e6ac fff2 65ad cfc0 2b06 3368 9261 0x0020: b9c6 142e 97ae 6799 75ae d7c2 0d98 6be0 0x0030: 363f de4f 93af 4162 7ca0 c477 7db8 c7d1 0x0040: 854b 683d ed25 e4a2 7127 9744 8092 9a70 0x0050: 0dc2 4728 01c1 2adb 2057 09ec 21c8 2f33 0x0060: 6c86 1e30 d293 2abf c4e0 5eab 6b9c 0018 0x0070: ed98 ae7d 59f7 4f96 080f 1a6d 54a3 5b46 0x0080: 6b68 cd0c 6247 5a47 c2e7 24df bcbb 9580 0x0090: 2587 cf76 dda3 e0e7 a975 a5c7 a76d e60a 0x00a0: 9f8a 564b 8ff9 aba4 e53f 59e0 4d3c 808c 0x00b0: 3907 6ece cdd4 f25a 3f21 6e27 13d0 52ee 0x00c0: 4721 1d67 b4b4 e958 27a3 ce95 6be6 1263 0x00d0: 79d9 58a9 79f5 6b20 c20a 56ed 22b6 5a77 0x00e0: f7a7 0203 0100 01a3 4f30 4d30 1306 0355 0x00f0: 1d25 040c 300a 0608 2b06 0105 05 EAP Message Attribute (79), length: 255, Value: ...06..U.../0-0+.).'.%http://www.example.com/example_ca.crl0...*.H....... 0x0000: 0703 0130 3606 0355 1d1f 042f 302d 302b 0x0010: a029 a027 8625 6874 7470 3a2f 2f77 7777 0x0020: 2e65 7861 6d70 6c65 2e63 6f6d 2f65 7861 0x0030: 6d70 6c65 5f63 612e 6372 6c30 0d06 092a 0x0040: 8648 86f7 0d01 010b 0500 0382 0101 0058 0x0050: 59d5 dee5 a703 0468 300d 7a1c 98b2 5b2d 0x0060: 3135 1586 7b7e 79e6 d62c ef1f 0a7c b2ff 0x0070: e4f9 462f 69d9 1fa2 4f32 8a6b fc4a 5df0 0x0080: 8e5d be56 a20a 9c7f 7a8d ed64 1c26 fa0b 0x0090: a743 5ea4 d64a 03b4 91f9 353a f148 0c12 0x00a0: fa48 d169 0c02 9dd7 cfeb 4034 a161 1264 0x00b0: 033b a2f3 2715 105c 2bed 7065 a2f3 b53f 0x00c0: d8f0 fa28 0a7b b4c4 e041 e4c2 15bf 2614 0x00d0: 26ac 28e3 8a04 8942 a29f 129f 34a5 e2a1 0x00e0: 5609 c006 4ee3 3772 bbae 0fb3 3cbe 5ffd 0x00f0: bc5f 57a5 32b0 e9b2 d366 4b4e 7a EAP Message Attribute (79), length: 14, Value: .`!K....N. 0x0000: 9460 214b efb4 b1e9 4eb8 004a Message Authentication Attribute (80), length: 18, Value: .). (m.e8.;r'w*. 0x0000: bb29 df20 286d d665 380d 3b72 2777 2ad6 State Attribute (24), length: 18, Value: .?.2.T...&....&I 0x0000: ba3f 8732 bb54 9297 c826 ab9a e9cc 2649 05:41:53.586029 IP (tos 0x0, ttl 64, id 65505, offset 0, flags [none], proto UDP (17), length 204) 192.168.2.3.49969 > 192.168.2.1.1812: [udp sum ok] RADIUS, length: 176 Access Request (1), id: 0x03, Authenticator: 1f7e04e3dc270f1bf4112481fec04f1b Username Attribute (1), length: 8, Value: scilek 0x0000: 7363 696c 656b NAS ID Attribute (32), length: 14, Value: 802aa8ac1ef9 0x0000: 3830 3261 6138 6163 3165 6639 NAS Port Attribute (5), length: 6, Value: 0 0x0000: 0000 0000 Called Station Attribute (30), length: 30, Value: 80-2A-A8-AD-1E-F9:SCILEK.NET 0x0000: 3830 2d32 412d 4138 2d41 442d 3145 2d46 0x0010: 393a 5343 494c 454b 2e4e 4554 Calling Station Attribute (31), length: 19, Value: 00-22-FA-F5-B9-0A 0x0000: 3030 2d32 322d 4641 2d46 352d 4239 2d30 0x0010: 41 Framed MTU Attribute (12), length: 6, Value: 1400 0x0000: 0000 0578 NAS Port Type Attribute (61), length: 6, Value: Wireless - IEEE 802.11 0x0000: 0000 0013 Connect Info Attribute (77), length: 23, Value: CONNECT 0Mbps 802.11b 0x0000: 434f 4e4e 4543 5420 304d 6270 7320 3830 0x0010: 322e 3131 62 EAP Message Attribute (79), length: 8, Value: .k 0x0000: 026b 0006 1500 State Attribute (24), length: 18, Value: .?.2.T...&....&I 0x0000: ba3f 8732 bb54 9297 c826 ab9a e9cc 2649 Message Authentication Attribute (80), length: 18, Value: @/mi.t3.....6.22 0x0000: 402f 6d69 bf74 33eb e985 10dc 36bb 3232 05:41:53.586364 IP (tos 0x0, ttl 64, id 44266, offset 0, flags [none], proto UDP (17), length 1118) 192.168.2.1.1812 > 192.168.2.3.49969: [bad udp cksum 0x89b0 -> 0x9dbc!] RADIUS, length: 1090 Access Challenge (11), id: 0x03, Authenticator: 387b3d414dd4370ce9ac80b37fdb3757 EAP Message Attribute (79), length: 255, Value: .l. 0x0000: 016c 0400 15c0 0000 092d 1fe6 1269 8018 0x0010: a84d 7a78 3351 8263 152b 81ed c619 5ff2 0x0020: e5e5 9c96 7084 3fed 4f92 3f9c 54ba 171c 0x0030: ddaa 0b2e 854b f4f0 1a38 c2b2 79e8 d7ec 0x0040: 8b71 4817 b5bc fc8f f719 f463 f321 c3aa 0x0050: 0004 e530 8204 e130 8203 c9a0 0302 0102 0x0060: 0209 009e 6894 62aa 4b37 0730 0d06 092a 0x0070: 8648 86f7 0d01 0105 0500 3081 9331 0b30 0x0080: 0906 0355 0406 1302 4652 310f 300d 0603 0x0090: 5504 080c 0652 6164 6975 7331 1230 1006 0x00a0: 0355 0407 0c09 536f 6d65 7768 6572 6531 0x00b0: 1530 1306 0355 040a 0c0c 4578 616d 706c 0x00c0: 6520 496e 632e 3120 301e 0609 2a86 4886 0x00d0: f70d 0109 0116 1161 646d 696e 4065 7861 0x00e0: 6d70 6c65 2e63 6f6d 3126 3024 0603 5504 0x00f0: 030c 1d45 7861 6d70 6c65 2043 65 EAP Message Attribute (79), length: 255, Value: rtificate Authority0...170109192513Z..180109192513Z0..1.0...U....FR1.0...U....Radius1.0...U....Somewhere1.0...U....Example Inc.1 0...*.H........admin@example.com1&0$..U....Example Certificate Authority0.."0...*.H....... 0x0000: 7274 6966 6963 6174 6520 4175 7468 6f72 0x0010: 6974 7930 1e17 0d31 3730 3130 3931 3932 0x0020: 3531 335a 170d 3138 3031 3039 3139 3235 0x0030: 3133 5a30 8193 310b 3009 0603 5504 0613 0x0040: 0246 5231 0f30 0d06 0355 0408 0c06 5261 0x0050: 6469 7573 3112 3010 0603 5504 070c 0953 0x0060: 6f6d 6577 6865 7265 3115 3013 0603 5504 0x0070: 0a0c 0c45 7861 6d70 6c65 2049 6e63 2e31 0x0080: 2030 1e06 092a 8648 86f7 0d01 0901 1611 0x0090: 6164 6d69 6e40 6578 616d 706c 652e 636f 0x00a0: 6d31 2630 2406 0355 0403 0c1d 4578 616d 0x00b0: 706c 6520 4365 7274 6966 6963 6174 6520 0x00c0: 4175 7468 6f72 6974 7930 8201 2230 0d06 0x00d0: 092a 8648 86f7 0d01 0101 0500 0382 010f 0x00e0: 0030 8201 0a02 8201 0100 ca5b 9546 fe48 0x00f0: 52c5 83da a7d5 b0e8 4e27 64d9 18 EAP Message Attribute (79), length: 255, Value: .."...2..9S...pv.4jL9.p...1.bLM.'Q...(....b.B;R&..4.....cG=..r&l9.y.F...y|-1p....n.@..../..UQ#......X;-..}.Q.......J.+.............D..... .......G...=7v......h......w.Z....t.$. .r../...f..../:.A..9"u.......'.L2.*.S.RS.....m5.@...l$....nm... 0x0000: e32e 22ac a6ef 32c8 dd39 530a c4ae 7076 0x0010: 0e34 6a4c 39ac 70b1 a515 31fe 624c 4d81 0x0020: 2751 13df f528 0810 db9f 62d8 423b 5226 0x0030: b519 34a5 b1f9 f5e8 6347 3df6 be72 266c 0x0040: 39c5 79cf 46d8 0c03 797c 8031 70ac b2be 0x0050: 176e 1140 d7f6 e2dd 2f96 ee55 5123 b6a9 0x0060: aabf 0edc 583b 2d92 b67d b751 119c de1c 0x0070: 92bd 2e4a fc2b 16b3 c8ff fe9a a699 87da 0x0080: 9fa8 1c44 0d07 0db5 b620 e4dd a4d8 e1fb 0x0090: 8747 bc02 c93d 3776 d00e 9bde 07e0 68e4 0x00a0: b9b8 98d4 b977 145a d2c9 f61d 749b 242e 0x00b0: 20cf 720a 092f f416 9466 8df8 b9a9 2f3a 0x00c0: 1141 bcf8 3922 7509 de9a 0813 d6c9 279a 0x00d0: 4c32 062a 9853 f952 53e3 81d4 d3c0 6d35 0x00e0: c840 a596 a26c 24c0 8481 1c6e 6d02 0301 0x00f0: 0001 a382 0134 3082 0130 301d 06 EAP Message Attribute (79), length: 255, Value: .U.........:..r\f." 0x0000: 0355 1d0e 0416 0414 08b0 0f3a baa9 725c 0x0010: 669e 2200 b70f 0f1a 9a53 92a7 3081 c806 0x0020: 0355 1d23 0481 c030 81bd 8014 08b0 0f3a 0x0030: baa9 725c 669e 2200 b70f 0f1a 9a53 92a7 0x0040: a181 99a4 8196 3081 9331 0b30 0906 0355 0x0050: 0406 1302 4652 310f 300d 0603 5504 080c 0x0060: 0652 6164 6975 7331 1230 1006 0355 0407 0x0070: 0c09 536f 6d65 7768 6572 6531 1530 1306 0x0080: 0355 040a 0c0c 4578 616d 706c 6520 496e 0x0090: 632e 3120 301e 0609 2a86 4886 f70d 0109 0x00a0: 0116 1161 646d 696e 4065 7861 6d70 6c65 0x00b0: 2e63 6f6d 3126 3024 0603 5504 030c 1d45 0x00c0: 7861 6d70 6c65 2043 6572 7469 6669 6361 0x00d0: 7465 2041 7574 686f 7269 7479 8209 009e 0x00e0: 6894 62aa 4b37 0730 0c06 0355 1d13 0405 0x00f0: 3003 0101 ff30 3606 0355 1d1f 04 EAP Message Attribute (79), length: 14, Value: /0-0+.).'.%h 0x0000: 2f30 2d30 2ba0 29a0 2786 2568 Message Authentication Attribute (80), length: 18, Value: =.nU/....{xgi.._ 0x0000: 3d95 6e55 2fad c6ed df7b 7867 6908 dc5f State Attribute (24), length: 18, Value: .?.2.S...&....&I 0x0000: ba3f 8732 b853 9297 c826 ab9a e9cc 2649 05:41:53.599727 IP (tos 0x0, ttl 64, id 65506, offset 0, flags [none], proto UDP (17), length 204) 192.168.2.3.49969 > 192.168.2.1.1812: [udp sum ok] RADIUS, length: 176 Access Request (1), id: 0x04, Authenticator: 88f13b6523360a7d6b8ebe4178dbd674 Username Attribute (1), length: 8, Value: scilek 0x0000: 7363 696c 656b NAS ID Attribute (32), length: 14, Value: 802aa8ac1ef9 0x0000: 3830 3261 6138 6163 3165 6639 NAS Port Attribute (5), length: 6, Value: 0 0x0000: 0000 0000 Called Station Attribute (30), length: 30, Value: 80-2A-A8-AD-1E-F9:SCILEK.NET 0x0000: 3830 2d32 412d 4138 2d41 442d 3145 2d46 0x0010: 393a 5343 494c 454b 2e4e 4554 Calling Station Attribute (31), length: 19, Value: 00-22-FA-F5-B9-0A 0x0000: 3030 2d32 322d 4641 2d46 352d 4239 2d30 0x0010: 41 Framed MTU Attribute (12), length: 6, Value: 1400 0x0000: 0000 0578 NAS Port Type Attribute (61), length: 6, Value: Wireless - IEEE 802.11 0x0000: 0000 0013 Connect Info Attribute (77), length: 23, Value: CONNECT 0Mbps 802.11b 0x0000: 434f 4e4e 4543 5420 304d 6270 7320 3830 0x0010: 322e 3131 62 EAP Message Attribute (79), length: 8, Value: .l 0x0000: 026c 0006 1500 State Attribute (24), length: 18, Value: .?.2.S...&....&I 0x0000: ba3f 8732 b853 9297 c826 ab9a e9cc 2649 Message Authentication Attribute (80), length: 18, Value: ...M...aBnq`...o 0x0000: c1a7 cf4d dfaf 1861 426e 7160 c198 056f 05:41:53.600273 IP (tos 0x0, ttl 64, id 32059, offset 0, flags [none], proto UDP (17), length 419) 192.168.2.1.1812 > 192.168.2.3.49969: [bad udp cksum 0x86f5 -> 0xd5b5!] RADIUS, length: 391 Access Challenge (11), id: 0x04, Authenticator: 3c354a7c0bb1c9e03928425b3a0f3c88 EAP Message Attribute (79), length: 255, Value: .m.K.- 0x0000: 016d 014b 1580 0000 092d 7474 703a 2f2f 0x0010: 7777 772e 6578 616d 706c 652e 636f 6d2f 0x0020: 6578 616d 706c 655f 6361 2e63 726c 300d 0x0030: 0609 2a86 4886 f70d 0101 0505 0003 8201 0x0040: 0100 73f6 9421 d625 2774 1db6 9cbe 68d3 0x0050: b2be e945 81de 8386 2e48 f28f a814 ef50 0x0060: 58eb 30fd 3d65 989c b8da 814b 64bc 09a3 0x0070: 8b42 574f 93c7 5d0b bd45 6455 4fbd f8c6 0x0080: abb8 6745 86ce 59d2 41c6 49a2 fa89 b7ac 0x0090: 0907 13b8 de83 9ba9 fef6 6c6f 7b74 4df1 0x00a0: dedc 103d 112a abb8 93c9 db88 2164 1fa9 0x00b0: c531 e35e 9719 bb3c ce56 17c1 8d93 52da 0x00c0: a3a9 6794 35f4 50d8 a297 cb07 58cc 2d5d 0x00d0: 0c2b 69b6 97f6 2fc6 1513 044a ef58 c2c1 0x00e0: 2eb1 50ef fd07 74ec 75a0 680a 2e6c 2730 0x00f0: 0196 eff4 da07 5876 c5a7 f80f f6 EAP Message Attribute (79), length: 80, Value: I.W.]g.S:/|.>.T..l3(..q..6 0x0000: 49aa 571e 5d67 fe53 3a2f 7ce7 3e1e 5491 0x0010: 147f 076c 3328 d4f6 71c9 e336 00b9 3027 0x0020: 4f3b 48b3 4764 7d4a c104 71af 9feb 2a8b 0x0030: c3b6 c72d f975 3307 851a ec9a 4858 0823 0x0040: 7b8b 52ad 3b16 0301 0004 0e00 0000 Message Authentication Attribute (80), length: 18, Value: .J.D...../^.-u"( 0x0000: 054a f944 e3e0 f30b 162f 5e8d 8075 2228 State Attribute (24), length: 18, Value: .?.2.R...&....&I 0x0000: ba3f 8732 b952 9297 c826 ab9a e9cc 2649 05:41:53.805650 IP (tos 0x0, ttl 64, id 65507, offset 0, flags [none], proto UDP (17), length 524) 192.168.2.3.49969 > 192.168.2.1.1812: [udp sum ok] RADIUS, length: 496 Access Request (1), id: 0x05, Authenticator: ee5372c574c18a7c3f1471d4eb8ecadd Username Attribute (1), length: 8, Value: scilek 0x0000: 7363 696c 656b NAS ID Attribute (32), length: 14, Value: 802aa8ac1ef9 0x0000: 3830 3261 6138 6163 3165 6639 NAS Port Attribute (5), length: 6, Value: 0 0x0000: 0000 0000 Called Station Attribute (30), length: 30, Value: 80-2A-A8-AD-1E-F9:SCILEK.NET 0x0000: 3830 2d32 412d 4138 2d41 442d 3145 2d46 0x0010: 393a 5343 494c 454b 2e4e 4554 Calling Station Attribute (31), length: 19, Value: 00-22-FA-F5-B9-0A 0x0000: 3030 2d32 322d 4641 2d46 352d 4239 2d30 0x0010: 41 Framed MTU Attribute (12), length: 6, Value: 1400 0x0000: 0000 0578 NAS Port Type Attribute (61), length: 6, Value: Wireless - IEEE 802.11 0x0000: 0000 0013 Connect Info Attribute (77), length: 23, Value: CONNECT 0Mbps 802.11b 0x0000: 434f 4e4e 4543 5420 304d 6270 7320 3830 0x0010: 322e 3131 62 EAP Message Attribute (79), length: 255, Value: .m.D. 0x0000: 026d 0144 1500 1603 0101 0610 0001 0201 0x0010: 00a3 0c2f ac52 1aea 40ff dfd7 bbd1 1676 0x0020: 465c acfd d8fa 54cf a41d 7972 f084 d606 0x0030: 09c6 af83 a6c0 1578 25b8 375c 9830 9276 0x0040: 52a9 ef9f 9303 1350 f181 97a7 aa40 e1a1 0x0050: 115e 08b9 90d3 b77f ac42 a0d3 1673 de42 0x0060: 5bbb c0ec bed3 275e 93d3 12ec b13c 5ace 0x0070: dd7b c5b4 68d8 ec53 7230 9c2f 1037 4ff5 0x0080: 4558 d03a decc 29cc 0802 0bc1 3941 7efd 0x0090: 6f60 0b04 cea7 3492 20e6 6548 405f 1af3 0x00a0: bc88 006a 67ae 1b0d 894e f411 506e 5e9a 0x00b0: c331 8368 5087 b39e 7125 ac54 fd17 4be7 0x00c0: ae55 1794 830c 5757 fabb 4144 0497 0129 0x00d0: 89d7 2ab6 deac 77dd 47ed 25dd 197a 71fb 0x00e0: a1e8 1fd1 d71c 8f9d 821b 9bdb f1ca 63f8 0x00f0: 7682 fda4 9513 6226 f463 9841 23 EAP Message Attribute (79), length: 73, Value: ....).....K....>.O.n... 0x0000: c6e0 e7d0 29da b1e3 e914 4b1c c318 fe3e 0x0010: 8d4f a76e 1403 0100 0101 1603 0100 28ea 0x0020: 4ed5 d286 2daf 29b6 d505 14de 7776 8234 0x0030: c7e3 bb59 aa50 aeb0 06d7 39f4 de9b 5453 0x0040: c11c 4156 c614 e4 State Attribute (24), length: 18, Value: .?.2.R...&....&I 0x0000: ba3f 8732 b952 9297 c826 ab9a e9cc 2649 Message Authentication Attribute (80), length: 18, Value: .......Z.q...... 0x0000: d4f6 89d6 b0a7 835a 0a71 84eb 161b dec0 05:41:53.808508 IP (tos 0x0, ttl 64, id 23655, offset 0, flags [none], proto UDP (17), length 147) 192.168.2.1.1812 > 192.168.2.3.49969: [bad udp cksum 0x85e5 -> 0xfadf!] RADIUS, length: 119 Access Challenge (11), id: 0x05, Authenticator: 20dc319d05596a7a7f51cda018ed48a7 EAP Message Attribute (79), length: 63, Value: .n 0x0000: 016e 003d 1580 0000 0033 1403 0100 0101 0x0010: 1603 0100 280d 5069 e675 e456 ecd3 417c 0x0020: 5d93 01de d1c5 31ec 7ad6 c596 dbfe 6090 0x0030: 811f d073 4797 c3e7 204c 217e 83 Message Authentication Attribute (80), length: 18, Value: .*...!...Dz...;. 0x0000: 942a ce08 1b21 bb08 f044 7ae6 938e 3bc2 State Attribute (24), length: 18, Value: .?.2.Q...&....&I 0x0000: ba3f 8732 be51 9297 c826 ab9a e9cc 2649 05:41:53.813801 IP (tos 0x0, ttl 64, id 65508, offset 0, flags [none], proto UDP (17), length 265) 192.168.2.3.49969 > 192.168.2.1.1812: [udp sum ok] RADIUS, length: 237 Access Request (1), id: 0x06, Authenticator: 683b68ac7d4ad04e8030b83a76d0e32d Username Attribute (1), length: 8, Value: scilek 0x0000: 7363 696c 656b NAS ID Attribute (32), length: 14, Value: 802aa8ac1ef9 0x0000: 3830 3261 6138 6163 3165 6639 NAS Port Attribute (5), length: 6, Value: 0 0x0000: 0000 0000 Called Station Attribute (30), length: 30, Value: 80-2A-A8-AD-1E-F9:SCILEK.NET 0x0000: 3830 2d32 412d 4138 2d41 442d 3145 2d46 0x0010: 393a 5343 494c 454b 2e4e 4554 Calling Station Attribute (31), length: 19, Value: 00-22-FA-F5-B9-0A 0x0000: 3030 2d32 322d 4641 2d46 352d 4239 2d30 0x0010: 41 Framed MTU Attribute (12), length: 6, Value: 1400 0x0000: 0000 0578 NAS Port Type Attribute (61), length: 6, Value: Wireless - IEEE 802.11 0x0000: 0000 0013 Connect Info Attribute (77), length: 23, Value: CONNECT 0Mbps 802.11b 0x0000: 434f 4e4e 4543 5420 304d 6270 7320 3830 0x0010: 322e 3131 62 EAP Message Attribute (79), length: 69, Value: .n 0x0000: 026e 0043 1500 1703 0100 389c 7528 6e1d 0x0010: 6b31 01c3 d18f 76cc 38a9 f67f e970 19d2 0x0020: 4480 cd69 2303 f3cd 72bc 8612 443e e79f 0x0030: 4a08 1384 d606 080d 107f d07d cde3 bffb 0x0040: bd65 30 State Attribute (24), length: 18, Value: .?.2.Q...&....&I 0x0000: ba3f 8732 be51 9297 c826 ab9a e9cc 2649 Message Authentication Attribute (80), length: 18, Value: I...5.....k.^.. 0x0000: 4985 982e 3592 aae5 b488 6bc2 5e1c 1520 05:41:54.123849 IP (tos 0x0, ttl 64, id 18155, offset 0, flags [none], proto UDP (17), length 202) 192.168.2.1.1812 > 192.168.2.3.49969: [bad udp cksum 0x861c -> 0x292d!] RADIUS, length: 174 Access Accept (2), id: 0x06, Authenticator: 4906ba0bbcc6118714855436d2cac662 Session Timeout Attribute (27), length: 6, Value: 10:00 min 0x0000: 0000 0258 Vendor Specific Attribute (26), length: 58, Value: Vendor: Microsoft (311) Vendor Attribute: 17, Length: 50, Value: .p&..F.....6..g59........%....m....!S@QE....9.yP 0x0000: 0000 0137 1134 8270 2601 d146 8619 dc07 0x0010: 1636 f1e4 6735 39c9 cc07 04d8 a77f eda9 0x0020: db25 9387 92c1 6d05 b192 ce21 5340 5145 0x0030: a09c ecea 39be 7950 Vendor Specific Attribute (26), length: 58, Value: Vendor: Microsoft (311) Vendor Attribute: 16, Length: 50, Value: .B...._..J.z.R.m.[.z..NN&..E...j...)..)..d9..... 0x0000: 0000 0137 1034 8a42 cced c2d2 5f8c ad4a 0x0010: 897a 1352 ec6d f35b 847a e92e 4e4e 26c1 0x0020: f845 8dc6 f66a 8ee7 93aa 7f29 bfe3 2910 0x0030: 0c64 3999 8ae3 82db EAP Message Attribute (79), length: 6, Value: .n 0x0000: 036e 0004 Message Authentication Attribute (80), length: 18, Value: ...F..)2.6 ... 0x0000: ed87 8746 bb8b 2932 ea22 7f36 208d d185 Username Attribute (1), length: 8, Value: scilek 0x0000: 7363 696c 656b 05:41:54.258981 IP (tos 0x0, ttl 64, id 65509, offset 0, flags [none], proto UDP (17), length 185) 192.168.2.3.50336 > 192.168.2.1.1813: [udp sum ok] RADIUS, length: 157 Accounting Request (4), id: 0x07, Authenticator: aeb0c681840ba4184384878a44da1ae2 Accounting Session ID Attribute (44), length: 19, Value: 5893ED8E-00000000 0x0000: 3538 3933 4544 3845 2d30 3030 3030 3030 0x0010: 30 Accounting Status Attribute (40), length: 6, Value: Start 0x0000: 0000 0001 Accounting Authentication Attribute (45), length: 6, Value: RADIUS 0x0000: 0000 0001 Username Attribute (1), length: 8, Value: scilek 0x0000: 7363 696c 656b NAS ID Attribute (32), length: 14, Value: 802aa8ac1ef9 0x0000: 3830 3261 6138 6163 3165 6639 NAS Port Attribute (5), length: 6, Value: 0 0x0000: 0000 0000 Called Station Attribute (30), length: 30, Value: 80-2A-A8-AD-1E-F9:SCILEK.NET 0x0000: 3830 2d32 412d 4138 2d41 442d 3145 2d46 0x0010: 393a 5343 494c 454b 2e4e 4554 Calling Station Attribute (31), length: 19, Value: 00-22-FA-F5-B9-0A 0x0000: 3030 2d32 322d 4641 2d46 352d 4239 2d30 0x0010: 41 NAS Port Type Attribute (61), length: 6, Value: Wireless - IEEE 802.11 0x0000: 0000 0013 Connect Info Attribute (77), length: 23, Value: CONNECT 0Mbps 802.11b 0x0000: 434f 4e4e 4543 5420 304d 6270 7320 3830 0x0010: 322e 3131 62 05:41:54.397906 IP (tos 0x0, ttl 64, id 54780, offset 0, flags [none], proto UDP (17), length 48) 192.168.2.1.1813 > 192.168.2.3.50336: [bad udp cksum 0x8582 -> 0x5a7f!] RADIUS, length: 20 Accounting Response (5), id: 0x07, Authenticator: 8cf1eb468c42e6c2008bef0a642f100e 05:51:54.132004 IP (tos 0x0, ttl 64, id 65510, offset 0, flags [none], proto UDP (17), length 227) 192.168.2.3.50336 > 192.168.2.1.1813: [udp sum ok] RADIUS, length: 199 Accounting Request (4), id: 0x08, Authenticator: c27eb7c1552287dc1581940287c46ecc Accounting Session ID Attribute (44), length: 19, Value: 5893ED8E-00000000 0x0000: 3538 3933 4544 3845 2d30 3030 3030 3030 0x0010: 30 Accounting Status Attribute (40), length: 6, Value: Stop 0x0000: 0000 0002 Accounting Authentication Attribute (45), length: 6, Value: RADIUS 0x0000: 0000 0001 Username Attribute (1), length: 8, Value: scilek 0x0000: 7363 696c 656b NAS ID Attribute (32), length: 14, Value: 802aa8ac1ef9 0x0000: 3830 3261 6138 6163 3165 6639 NAS Port Attribute (5), length: 6, Value: 0 0x0000: 0000 0000 Called Station Attribute (30), length: 30, Value: 80-2A-A8-AD-1E-F9:SCILEK.NET 0x0000: 3830 2d32 412d 4138 2d41 442d 3145 2d46 0x0010: 393a 5343 494c 454b 2e4e 4554 Calling Station Attribute (31), length: 19, Value: 00-22-FA-F5-B9-0A 0x0000: 3030 2d32 322d 4641 2d46 352d 4239 2d30 0x0010: 41 NAS Port Type Attribute (61), length: 6, Value: Wireless - IEEE 802.11 0x0000: 0000 0013 Connect Info Attribute (77), length: 23, Value: CONNECT 0Mbps 802.11b 0x0000: 434f 4e4e 4543 5420 304d 6270 7320 3830 0x0010: 322e 3131 62 Accounting Session Time Attribute (46), length: 6, Value: 10:00 min 0x0000: 0000 0258 Accounting Input Packets Attribute (47), length: 6, Value: 25902 0x0000: 0000 652e Accounting Output Packets Attribute (48), length: 6, Value: 25367 0x0000: 0000 6317 Accounting Input Octets Attribute (42), length: 6, Value: 38351862 0x0000: 0249 33f6 Accounting Output Octets Attribute (43), length: 6, Value: 37234905 0x0000: 0238 28d9 Event Timestamp Attribute (55), length: 6, Value: Fri Feb 3 05:51:54 2017 0x0000: 5893 f04a Accounting Termination Cause Attribute (49), length: 6, Value: Session Timeout 0x0000: 0000 0005 05:51:54.218628 IP (tos 0x0, ttl 64, id 14490, offset 0, flags [none], proto UDP (17), length 48) 192.168.2.1.1813 > 192.168.2.3.50336: [bad udp cksum 0x8582 -> 0x1e9c!] RADIUS, length: 20 Accounting Response (5), id: 0x08, Authenticator: 2c63c8bb1dfa86a4d759772699fe08b7 05:51:54.267225 IP (tos 0x0, ttl 64, id 65511, offset 0, flags [none], proto UDP (17), length 185) 192.168.2.3.50336 > 192.168.2.1.1813: [udp sum ok] RADIUS, length: 157 Accounting Request (4), id: 0x09, Authenticator: 2ebaffce1988a97ca3ad87f778ac5fe2 Accounting Session ID Attribute (44), length: 19, Value: 5893ED8E-00000001 0x0000: 3538 3933 4544 3845 2d30 3030 3030 3030 0x0010: 31 Accounting Status Attribute (40), length: 6, Value: Start 0x0000: 0000 0001 Accounting Authentication Attribute (45), length: 6, Value: RADIUS 0x0000: 0000 0001 Username Attribute (1), length: 8, Value: scilek 0x0000: 7363 696c 656b NAS ID Attribute (32), length: 14, Value: 802aa8ac1ef9 0x0000: 3830 3261 6138 6163 3165 6639 NAS Port Attribute (5), length: 6, Value: 0 0x0000: 0000 0000 Called Station Attribute (30), length: 30, Value: 80-2A-A8-AD-1E-F9:SCILEK.NET 0x0000: 3830 2d32 412d 4138 2d41 442d 3145 2d46 0x0010: 393a 5343 494c 454b 2e4e 4554 Calling Station Attribute (31), length: 19, Value: 00-22-FA-F5-B9-0A 0x0000: 3030 2d32 322d 4641 2d46 352d 4239 2d30 0x0010: 41 NAS Port Type Attribute (61), length: 6, Value: Wireless - IEEE 802.11 0x0000: 0000 0013 Connect Info Attribute (77), length: 23, Value: CONNECT 0Mbps 802.11b 0x0000: 434f 4e4e 4543 5420 304d 6270 7320 3830 0x0010: 322e 3131 62 05:51:54.268354 IP (tos 0x0, ttl 64, id 92, offset 0, flags [none], proto UDP (17), length 48) 192.168.2.1.1813 > 192.168.2.3.50336: [bad udp cksum 0x8582 -> 0x3d15!] RADIUS, length: 20 Accounting Response (5), id: 0x09, Authenticator: 00977e1f32911ea84718882913beb989 06:03:33.871872 IP (tos 0x0, ttl 64, id 65512, offset 0, flags [none], proto UDP (17), length 227) 192.168.2.3.50336 > 192.168.2.1.1813: [udp sum ok] RADIUS, length: 199 Accounting Request (4), id: 0x0a, Authenticator: 5a055ed6fb4dbcf4dbc101c723b768a6 Accounting Session ID Attribute (44), length: 19, Value: 5893ED8E-00000001 0x0000: 3538 3933 4544 3845 2d30 3030 3030 3030 0x0010: 31 Accounting Status Attribute (40), length: 6, Value: Stop 0x0000: 0000 0002 Accounting Authentication Attribute (45), length: 6, Value: RADIUS 0x0000: 0000 0001 Username Attribute (1), length: 8, Value: scilek 0x0000: 7363 696c 656b NAS ID Attribute (32), length: 14, Value: 802aa8ac1ef9 0x0000: 3830 3261 6138 6163 3165 6639 NAS Port Attribute (5), length: 6, Value: 0 0x0000: 0000 0000 Called Station Attribute (30), length: 30, Value: 80-2A-A8-AD-1E-F9:SCILEK.NET 0x0000: 3830 2d32 412d 4138 2d41 442d 3145 2d46 0x0010: 393a 5343 494c 454b 2e4e 4554 Calling Station Attribute (31), length: 19, Value: 00-22-FA-F5-B9-0A 0x0000: 3030 2d32 322d 4641 2d46 352d 4239 2d30 0x0010: 41 NAS Port Type Attribute (61), length: 6, Value: Wireless - IEEE 802.11 0x0000: 0000 0013 Connect Info Attribute (77), length: 23, Value: CONNECT 0Mbps 802.11b 0x0000: 434f 4e4e 4543 5420 304d 6270 7320 3830 0x0010: 322e 3131 62 Accounting Session Time Attribute (46), length: 6, Value: 11:39 min 0x0000: 0000 02bb Accounting Input Packets Attribute (47), length: 6, Value: 31647 0x0000: 0000 7b9f Accounting Output Packets Attribute (48), length: 6, Value: 31001 0x0000: 0000 7919 Accounting Input Octets Attribute (42), length: 6, Value: 47285431 0x0000: 02d1 84b7 Accounting Output Octets Attribute (43), length: 6, Value: 45668506 0x0000: 02b8 d89a Event Timestamp Attribute (55), length: 6, Value: Fri Feb 3 06:03:33 2017 0x0000: 5893 f305 Accounting Termination Cause Attribute (49), length: 6, Value: User Request 0x0000: 0000 0001 06:03:33.904382 IP (tos 0x0, ttl 64, id 42771, offset 0, flags [none], proto UDP (17), length 48) 192.168.2.1.1813 > 192.168.2.3.50336: [bad udp cksum 0x8582 -> 0xab6f!] RADIUS, length: 20 Accounting Response (5), id: 0x0a, Authenticator: 3ec4aac2a6494ea60ef86e0e7a7b2825