Logging Packet-Type of reply packets from inner-tunnel

[Alan DeKok]

Bob Franklin wrote:
> However, I can't seem to do this with locally-handled packets -- I have
> 'post-auth' which runs for 'Access-Accept' and (optionally, through
> 'Post-Auth-Type REJECT'), 'Access-Reject'.  But I would like to be able
> to log the intermediate 'Access-Challenge' packets.
> 
> Putting %{reply:Packet-Type} at the end of the 'authorize' section
> doesn't work (I just get '0').

  The issue is that the response *might* be an Access-Challenge, or it
might be an Access-Reject.  The final decision isn't made until after
all of the modules have been executed.

  But I don't see why you want to log the intermediate Access-Challenges...

  Alan DeKok.