Anyone have an example Cisco TACACS Acct PCAP?

[Michael Schwartzkopff]

Hi,


I can try to set up something here. I have switches but I don't have a 
ISE here. I would have to set up a test ISE system, which is kind of PITA.


If needed, please contact me at my direct e-mail ms at sys4.de.


Michael.



On 24.02.23 17:30, Arran Cudbard-Bell via Freeradius-Users wrote:
> We (The FreeRADIUS development team) are fixing up the TACACS frontend and process modules in v4.0.x.
>
> The example packets we're working with for TACACS accounting have timestamps in the format "2023-02-22 18:37:36 EST".
>
> RFC 8907 states timestamps should be seconds since the unix epoch.
>
> We're wondering how many TACACS clients out there actually follow the RFC and how many use their own weird and wonderful formats.
>
> We'd appreciate any PCAPs (or screen grabs of PCAPs) which show the format their TACACS clients uses for dates.
>
> Thanks,
> -Arran
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html