accounting Framed-IP-Address

[Alan Buxey]

Hi,

> destination acct_radius { pipe("/var/log/mysql.pipe" \
> template("UPDATE radacct SET FramedIPAddress = SUBSTRING_INDEX(SUBSTRING_INDEX('$MSG','on ',-1),' to',1) \
> WHERE TIMESTAMPDIFF(SECOND,AcctStartTime,CONCAT('$YEAR-$MONTH-$DAY',' ','$HOUR:$MIN:$SEC')) <= 180 AND \
> REPLACE(REPLACE(CallingStationId,'-',''),':','') = REPLACE(SUBSTRING(SUBSTRING_INDEX('$MSG','to ',-1),1,17),':','') \
> AND FramedIPAddress = \"\" ;\n") template-escape(yes));
> };
> 
> but my FramedIPAddress field still got this strange ip adress 3.118.236.192
> 
> somebody has a clue?

<wild guess>

192.236.118.3   - which was the last address the client had and is therefore
doing a DHCP request for  - hence its appearing it your logs...and into your system

</wild guesS>



or it might even be 3.118.236.192 - you never know what people do with
their own networks(!) - look at the live logs that syslog-ng is muching on to 
see what you see... or tcpdump in full debug/text mode the DHCP process.

alan