Is there a way to send accounting log to syslog instead of detail file in radacct? Also instead of sending it to sql db, i tried to use sql-file but it results in a lot of sql command (we really don't want to run the sql command later). INSERT INTO radacct (AcctSessionId, UserName, NASIPAddress, FramedIPAddress, AcctStartTime, AcctStopTime, AcctSessionTime, AcctTerminateCause) VALUES ('4fc645a8/00:25:00:3e:e6:c2/188601', 'luoy', '172.18.47.242', '172.25.128.186', '2012-05-30 12:07:04', '0', '0', ''); INSERT INTO radacct (AcctSessionId, UserName, NASIPAddress, FramedIPAddress, AcctStartTime, AcctStopTime, AcctSessionTime, AcctTerminateCause) VALUES ('4fc645d8/10:40:f3:1c:a3:b4/188604', '1040f31ca3b4', '172.18.47.242', '172.24.146.51', '2012-05-30 12:07:52', '0', '0', ' '); Also noticing the UserName part, a lot of times that a binary username is logged, like here "1040f31ca3b4", instead of the real name. How to fix this? THanks for the help Frank
On 30/05/12 18:00, Luo, Frank Y.F. Mr. wrote:
Is there a way to send accounting log to syslog instead of detail file in radacct?
See "linelog"
Also instead of sending it to sql db, i tried to use sql-file but it results in a lot of sql command (we really don't want to run the sql command later).
I don't know what this means, I'm afraid.
Also noticing the UserName part, a lot of times that a binary username is logged, like here "1040f31ca3b4", instead of the real name. How to fix this?
That's not a "binary username". It's the MAC address, without any colons.
thanks. will do some research. But I guess I can not send this as syslog entry to a syslog server, right? Also about the username, you are right on the Mac address - I misread it - but I do see unreadable accounting log like this one in the packet. Is this something fixable at NAS? Frank rad_recv: Accounting-Request packet from host 172.18.47.242 port 32768, id=127, length=235 User-Name = "f87b7a92466d" NAS-Port = 29 NAS-IP-Address = 172.18.47.242 Framed-IP-Address = 172.24.7.145 NAS-Identifier = "xxxxxxxxxxx" Airespace-Wlan-Id = 5 Acct-Session-Id = "4fccbbf1/f8:7b:7a:92:46:6d/197670" Acct-Authentic = Remote Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "1632" Acct-Status-Type = Stop Acct-Input-Octets = 3790 Acct-Output-Octets = 5427 Acct-Input-Packets = 42 Acct-Output-Packets = 12 Acct-Terminate-Cause = User-Request Acct-Session-Time = 77 Acct-Delay-Time = 0 Calling-Station-Id = "0.0.0.0" Called-Station-Id = "172.18.47.242" Cisco-AVPair = "nas-update=true" On May 30, 2012, at 1:30 PM, Phil Mayers wrote:
On 30/05/12 18:00, Luo, Frank Y.F. Mr. wrote:
Is there a way to send accounting log to syslog instead of detail file in radacct?
See "linelog"
Also instead of sending it to sql db, i tried to use sql-file but it results in a lot of sql command (we really don't want to run the sql command later).
I don't know what this means, I'm afraid.
Also noticing the UserName part, a lot of times that a binary username is logged, like here "1040f31ca3b4", instead of the real name. How to fix this?
That's not a "binary username". It's the MAC address, without any colons. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On 06/04/2012 04:02 PM, Luo, Frank Y.F. Mr. wrote:
thanks. will do some research. But I guess I can not send this as syslog entry to a syslog server, right?
yes, you can - just configure linelog to send the wanted variables to syslog.. -- Jens Weibler IT-Services Hochschule Darmstadt www.h-da.de University of Applied Sciences Fachbereich Informatik www.fbi.h-da.de Schöfferstr. 8b D-64295 Darmstadt Tel +49 6151 16-8425 Fax +49 6151 16-8935 jens.weibler@h-da.de
oops, yes it is described in the config file - thanks anyway On Jun 4, 2012, at 10:10 AM, Jens Weibler wrote:
On 06/04/2012 04:02 PM, Luo, Frank Y.F. Mr. wrote:
thanks. will do some research. But I guess I can not send this as syslog entry to a syslog server, right?
yes, you can - just configure linelog to send the wanted variables to syslog..
-- Jens Weibler IT-Services
Hochschule Darmstadt www.h-da.de University of Applied Sciences
Fachbereich Informatik www.fbi.h-da.de Schöfferstr. 8b D-64295 Darmstadt Tel +49 6151 16-8425 Fax +49 6151 16-8935 jens.weibler@h-da.de
<smime.p7s>- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Mon, Jun 04, 2012 at 10:02:01AM -0400, Luo, Frank Y.F. Mr. wrote:
Also about the username, you are right on the Mac address - I misread it - but I do see unreadable accounting log like this one in the packet. Is this something fixable at NAS?
Nothing looks wrong with the packet below. Again, just the MAC address as the username. You seem to be using a Cisco wireless controller - it will send the same User-Name in the accounting packet as it received in the Access-Accept packet, so check what you're sending back there. Matthew
rad_recv: Accounting-Request packet from host 172.18.47.242 port 32768, id=127, length=235 User-Name = "f87b7a92466d" NAS-Port = 29 NAS-IP-Address = 172.18.47.242 Framed-IP-Address = 172.24.7.145 NAS-Identifier = "xxxxxxxxxxx" Airespace-Wlan-Id = 5 Acct-Session-Id = "4fccbbf1/f8:7b:7a:92:46:6d/197670" Acct-Authentic = Remote Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "1632" Acct-Status-Type = Stop Acct-Input-Octets = 3790 Acct-Output-Octets = 5427 Acct-Input-Packets = 42 Acct-Output-Packets = 12 Acct-Terminate-Cause = User-Request Acct-Session-Time = 77 Acct-Delay-Time = 0 Calling-Station-Id = "0.0.0.0" Called-Station-Id = "172.18.47.242" Cisco-AVPair = "nas-update=true"
-- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Architect (UNIX and Networks), Network Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
participants (4)
-
Jens Weibler -
Luo, Frank Y.F. Mr. -
Matthew Newton -
Phil Mayers