(RADIATOR) Radiator logging

Ash Garg ash at telstra.net
Thu Jun 23 19:25:42 CDT 2005


Hugh,

Radiator does not spend much time processing the packet as per the log below
however the process is running at 80%, postgres at 15% and its dropping
packets.

Fri Jun 24 10:19:19 2005 41832: DEBUG: Packet dump:
*** Received from xxxxx port 1035 ....
Code:       Access-Request
Identifier: 94
Authentic:  1234567890123456
Attributes:
        User-Name = "xxxxx"
        User-Password = "xxxxx"
        Service-Type = Framed-User

Fri Jun 24 10:19:19 2005 42942: DEBUG: Handling request with Handler
'Realm=DEFAULT'
Fri Jun 24 10:19:19 2005 43687: DEBUG: Rewrote user name to xxxxx
Fri Jun 24 10:19:19 2005 44420: DEBUG:  Deleting session for xxxxx, yyyyy,
Fri Jun 24 10:19:19 2005 44987: DEBUG: Handling with Radius::AuthTISQL
Fri Jun 24 10:19:19 2005 45463: DEBUG: Handling with Radius::AuthTISQL:
Fri Jun 24 10:19:19 2005: ERR: Attribute number 79 is not defined in your
dictionary
Fri Jun 24 10:19:19 2005 46256: ERR: Attribute number 79 is not defined in
your dictionary
Fri Jun 24 10:19:19 2005 46957: DEBUG: Query is: xxxxx

Fri Jun 24 10:19:19 2005 48730: DEBUG: Query is: xxxxx

Fri Jun 24 10:19:19 2005 50608: DEBUG: Query is: xxxxx

Fri Jun 24 10:19:19 2005 52956: DEBUG: Radius::AuthTISQL looks for match
with xxxxx
Fri Jun 24 10:19:19 2005 54172: DEBUG: Radius::AuthTISQL ACCEPT:
Fri Jun 24 10:19:19 2005 55010: DEBUG: Access accepted for xxxxx
Fri Jun 24 10:19:19 2005 56228: DEBUG: Packet dump:
*** Sending to xxxxx port 1035 ....
Code:       Access-Accept
Identifier: 94
Authentic:  1234567890123456
Attributes:
        cisco-avpair = "xxxxx"
        Framed-MTU = 1500
        Service-Type = Framed-User
        Framed-Protocol = PPP
        Framed-IP-Netmask = 255.255.255.255
        Framed-Routing = None



Ash

-----Original Message-----
From: owner-radiator at open.com.au [mailto:owner-radiator at open.com.au]On
Behalf Of Hugh Irvine
Sent: Thursday, 23 June 2005 11:56 PM
To: ash at telstra.net
Cc: radiator at open.com.au
Subject: Re: (RADIATOR) Radiator logging



Hello Ash -

If tcpdump sees the requests, but Radiator does not, it can only be
because the radius UDP ports are overflowing the buffer pool.

You can check how long Radiator is taking to process requests by
looking at a trace 4 debug with a LogMicroseconds logger (requires
Time-HiRes from CPAN). Performance problems with Radiator are almost
always due to database performance issues.

regards

Hugh


On 22 Jun 2005, at 21:51, Ash Garg wrote:

> Guys,
>
> We have the following two options in our radiator config to log to
> a file.
>
> Trace   4
> LogDir          /data/log/radius
>
>
> In addition I'm also tcpdumping all transactions on port 1645 to a
> file.
> I've noticed that all access accepts are logged  by both methods.
> However
> tcpdump reports the correct number of access requests hitting the
> server
> where as the radiator logfile does not.
>
> The server is a 4 CPU machine running FreeBSD 4.11 and Radiator 3.9
> into a
> reasonably well tuned Postgres db. Any ideas?
>
>
> Regards,
> Ash
>
>
>                                            \\\|||///
>                                           \\  ^ ^  //
>                                            (  6 6  )
> -----------------------------------------oOOo-(_)-oOOo---
> Ash Garg                             5/490 Northbourne Ave
> Network Specialist                   DICKSON 2602
> Internet Network Development
> Telstra
>
> Email: <<mailto:Ash.Garg at telstra.net>>
> BH:  +612 6208 1994
> Mob: 0408 687 642
> Fax: +612 6248 6165
>
>
> This communication may contain CONFIDENTIAL or copyright
> information of Telstra Corporation Limited (ABN 33 051 775 556).
> If you are not an intended recipient, you MUST NOT keep,
> forward, copy, use, save or rely on this communication, and
> any such action is unauthorised and prohibited. If you have
> received this communication in error, please reply to this e-mail
> to notify the sender of its incorrect delivery, and then delete
> both it and your reply. Thank you.
>
> ----------------------------------------------------------
>
>
> --
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
>


NB: I am travelling this week, so there may be delays in our
correspondence.

--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.


--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.

--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list