12 Nov
2012
12 Nov
'12
5:24 a.m.
On Fri, 2012-11-09 at 15:37 -0400, Chris Taylor wrote:
I setup tcpdump to dump to a file (tcpdump -i eth0 -n -s0 port radius -w rad-capture.lpc) , but when I check it out with wireshark I am unable to see the password (just the username). Am I going about this the wrong way?
You can decrypt the password from the tcpdump capture with radsniff: radsniff -I rad-capture.lpc -s <shared-secret> -- Øystein