(RADIATOR) raddump RADIUS packet analyzer

Jonathan Moore jonm at isc.upenn.edu
Wed Sep 22 10:54:15 CDT 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Folks,

I'd like to announce the availability of the raddump RADIUS packet 
analyzer which may be useful for debugging your RADIUS infrastructure. 
Please see the project homepage at 
https://sourceforge.net/projects/raddump/ for more details.

It is GPL'ed and available as:
http://prdownloads.sourceforge.net/raddump/raddump-0.2.1.tar.gz?download

What is raddump? From the man page:

        raddump(1)  interprets  captured  RADIUS  packets to print
        details about them, including a timestamp, packet lengths,
        RADIUS  packet  type,  source  and  destination  hosts and
        ports, and included attribute names and values. It is pri-
        marily  useful in conjunction with packet capture programs
        such as tcpdump(1) or snoop(1M), and can be used either on
        a  saved file or in a pipeline to monitor ongoing communi-
        cations.

        raddump(1) currently understands packet  traces  that  are
        RFC  1761-compliant  (e.g.  those produced by snoop v2) as
        well as those that are stored in the libpcap format  (e.g.
        those  produced by tcpdump). raddump(1) is able to distin-
        guish these file formats on the fly, so it is  not  neces-
        sary to indicate which type of trace you are feeding it.

Example output:
[fred: ~/src/raddump]$ ./raddump -vs < snoopv2.pkts
Looks like a(n) RFC 1761 (snoop v2) packet trace
10:07:58.916467 radius DUMBLEDORE:60818 > knockknock:1645 
Access-Request 32
   User-Name = netmon
   User-Password = <16 bytes>
   NAS-IP-Address = 128.91.254.254
10:08:00.089439 radius knockknock:1645 > DUMBLEDORE:60818 Access-Accept 
16
   Vendor-Specific = PennID = XXXXXXXX

You may find this useful for debugging your RADIUS server by monitoring 
traffic in real time, or for doing offline examination of a problematic 
session. For example, we have already found it useful here at UPenn to 
be able to say: "do a tcpdump while you try to hit our RADIUS server 
and then send us the saved packets."

The current version should build on Solaris, Mac OS X, and Linux.

Cheers,
Jon Moore
- --
Jon Moore
ISC Networking & Telecommunications
University of Pennsylvania
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (Darwin)

iD8DBQFBUaApx8TaElR3qMMRAvFaAKCqdBV9A27wxK0FSPcfY0zFwjpSnACgi1Yc
pKcAPiZR8xXI3SZPHx6K4/I=
=fM6u
-----END PGP SIGNATURE-----

--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list