On Thu, Jun 07, 2012 at 12:59:24PM -0300, Sergio Belkin wrote:
I just chuck the raw data out with detail and leave it be. The useful stuff is pristinely formatted with gentle loving care by the linelog module, where it sits in a nice greppable format for
Wow, linelog seems interesting, I've tried but only is logging Access-Request, why?
You didn't call it in the accounting{} section? You won't get an EAP-Type in accounting, though. There's no EAP involved there. Matthew
rad_recv: Accounting-Request packet from host 10.129.85.1 port 39402, id=192, length=199 Acct-Session-Id = "00000026-0000003A" Acct-Status-Type = Stop Acct-Authentic = RADIUS User-Name = "fsaze1" NAS-Identifier = "AP-PVIII-V" NAS-Port = 4 Called-Station-Id = "00-23-69-49-06-2C:sarlanga-I" Calling-Station-Id = "60-FA-CD-42-C0-CE" NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 54Mbps 802.11g" Acct-Session-Time = 30 Acct-Input-Packets = 98 Acct-Output-Packets = 26 Acct-Input-Octets = 11164 Acct-Output-Octets = 7989 Event-Timestamp = "Jun 7 2012 10:37:44 ART" Acct-Terminate-Cause = User-Request # Executing section preacct from file /etc/raddb-testing/sites-enabled/default +- entering group preacct {...} ++[preprocess] returns ok [acct_unique] Hashing 'NAS-Port = 4,Client-IP-Address = 10.129.85.1,NAS-IP-Address = 10.129.85.1,Acct-Session-Id = "00000026-0000003A",User-Name = "fsaze1"' [acct_unique] Acct-Unique-Session-ID = "66c3a7d6e3d79d1a". ++[acct_unique] returns ok [suffix] No '@' in User-Name = "fsaze1", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop ++[files] returns noop # Executing section accounting from file /etc/raddb-testing/sites-enabled/default +- entering group accounting {...} [detail] expand: /usr/local-test/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /usr/local-test/var/log/radius/radacct/10.129.85.1/detail-20120607 [detail] /usr/local-test/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /usr/local-test/var/log/radius/radacct/10.129.85.1/detail-20120607 [detail] expand: %t -> Thu Jun 7 10:37:44 2012 ++[detail] returns ok ++[unix] returns ok [radutmp] expand: /usr/local-test/var/log/radius/radutmp -> /usr/local-test/var/log/radius/radutmp [radutmp] expand: %{User-Name} -> fsaze1 ++[radutmp] returns ok ++[exec] returns noop [attr_filter.accounting_response] expand: %{User-Name} -> fsaze1 attr_filter: Matched entry DEFAULT at line 12 ++[attr_filter.accounting_response] returns updated Sending Accounting-Response of id 192 to 10.129.85.1 port 39402 Finished request 0.
End of Output
-- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Architect (UNIX and Networks), Network Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>