[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Help-gnu-radius] Strange accounting logs
|
From: |
Sergey Poznyakoff |
|
Subject: |
Re: [Help-gnu-radius] Strange accounting logs |
|
Date: |
Mon, 18 Nov 2002 12:29:57 +0200 |
The message
Acct.notice: NOT writing wtmp record (1) for `',NAS max6k,port 2
means that the NAS "max6k" sent an accounting packet for port 2 with
empty username (`'). Therefore this packet was not accounted.
The message
Acct.info: login: entry for NAS 24.222.26.2 port 2 duplicate
means that the nas with IP 24.222.26.2 has sent duplicate accounting
start packet.
> So port 2 is in state "4294" -- what does this mean?
4294 is the value of Framed-Protocol attribute received with the start
packet. It is displayed as is since it does not correspond to any
dictionary value for that attribute.
> Where are the duplicate accounting packets coming from?
They are coming from NAS max6k (apparently with IP 24.222.26.2). Take
a look at detail file (usually /var/log/radacct/max6k/detail) to
examine the full contents of the packets coming from that NAS.
Regards,
Sergey