monitor an eap session in a production environment with a lot of devices

[Alan DeKok]

On Sep 28, 2017, at 10:02 AM, Marco Santantonio <marco.santantonio at unito.it> wrote:
> 
> I wanted to ask how to monitor an eap session

  What does that mean?

> in a production environment
> with a lot of devices. Have you developed a method or a best practice that
> helps in those cases?

  To do what?  Please *describe* what you want to do.

> Analyzing freeradius debug, in addition to the state attribute, there is
> some internal variable to see if a package is part of an ongoing session,
> it's a retransmitted or duplicated packet, or is it the beginning of a new
> session?

  If the request has a State attribute, it's part of an ongoing authentication session, which is usually EAP.

  If the request has no State attribute, it's either PAP, or the start of an EAP session.

  Duplicate requests are *never* processed through the server.

  Alan DeKok.