Mysterious RADIUS accounting packets

Keith K Chau (keithc@unitech.com.hk)
Fri, 21 Mar 1997 11:53:33 +0800

I found some strange log entries in our RADIUS 'details' file. There
could be two "Stop" packets for the same session having the same
Acct-Session-Id but showing different Acct-Session-Time.

This is abnormal, right? Or am I missing something? Here is an extract
of the log showing the problem. Thanks for any input.

Keith

--
Mon Feb 17 13:39:36 1997
        Acct-Session-Id = "21000002"
        User-Name = "test"
        NAS-IP-Address = 202.103.105.77
        NAS-Port = 1
        NAS-Port-Type = Async
        Acct-Status-Type = Start
        Acct-Authentic = RADIUS
        Service-Type = Login-User
        Login-Service = Telnet
        Login-IP-Host = 202.103.97.6
        Acct-Delay-Time = 0
        Timestamp = 856157976
 
Mon Feb 17 13:40:03 1997
        Acct-Session-Id = "21000002"
        User-Name = "test"
        NAS-IP-Address = 202.103.105.77
        NAS-Port = 1
        NAS-Port-Type = Async
        Acct-Status-Type = Stop
        Acct-Session-Time = 27
        Acct-Authentic = RADIUS
        Acct-Input-Octets = 44
        Acct-Output-Octets = 1147
        Service-Type = Login-User
        Login-Service = Telnet
        Login-IP-Host = 202.103.97.6
        Acct-Delay-Time = 0
        Timestamp = 856158003
 
Mon Feb 17 13:40:18 1997
        Acct-Session-Id = "21000002"
        User-Name = "test"
        NAS-IP-Address = 202.103.105.77
        NAS-Port = 1
        NAS-Port-Type = Async
        Acct-Status-Type = Stop
        Acct-Session-Time = 41
        Acct-Authentic = RADIUS
        Acct-Input-Octets = 45
        Acct-Output-Octets = 2052
        Service-Type = Login-User
        Login-Service = Telnet
        Login-IP-Host = 202.103.97.6
        Acct-Delay-Time = 0
        Timestamp = 856158018