radiusd debug understanding help needed (EAP session for state 0x... did not finish)

[Arran Cudbard-Bell]

> On Jun 26, 2015, at 3:29 PM, Arran Cudbard-Bell <a.cudbardb at freeradius.org> wrote:
> 
> 
>> On Jun 26, 2015, at 3:16 PM, Zeus Panchenko <zeus at ibs.dn.ua> wrote:
>> 
>> Arran Cudbard-Bell <a.cudbardb at freeradius.org> wrote:
>> 
>>> 
>>>> What you should do:
>>>> 
>>>> 1. Provide packet captures from the supplicant.
>>>> 
>>>> 2. Provide packet captures from the port on your NAS connected to the supplicant.
>>>> 
>>>> 3. Provide packet captures from the uplink of your NAS, on which RADIUS traffic is sent.
>>>> 
>>>> 4. Provide packet captures from the RADIUS server.
>>> 
>> 
>> will it be enough just
>> 
>> tcpdump -ni interfase-for-auth host my.freeradius.foo
>> 
>> on both FR and supplicant?
>> 
>> since both of them are FreeBSD boxes, and the switch they are connected
>> to has no tool to capture packets ...
> 
> No, it's not enough.
> 
> Buy a 10/100 hub and use that to mirror the packets.
> 
> http://www.ebay.ca/itm/NetGear-DS309-9-Port-10-100-Dual-Speed-Hub-Network-Switch-/171835398485?pt=LH_DefaultDomain_0&hash=item2802301955
> 
> These things are invaluable for diagnostics.

and it has to be a *HUB* not a switch.

this is a possibly cheaper alternative.

https://greatscottgadgets.com/throwingstar/

-Arran
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 842 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20150626/4a20bc01/attachment.sig>