Re: Nukers

Josh Hillman ( (no email) )
Mon, 27 Jul 1998 11:15:35 -0400

> From: Richard Sensale <>
> Up until today I have not needed a way to track callers but I just got a
> call from an irate person who had been nuked. According to the user, it
> came from one of my IPs. I need to know if there is a way to pull start
> stop records for a certain time and date period out of radius somehow.
> some reason our log files have stopped recording.

They're only logged in the Calls table, unless you have Radius spitting the
info out into text files somewhere.
One thing you might do is look at your mailserver logs for anything with a
matching IP address that happened to do something with mail at about the
same time that one person was nuked. It may not be precise, but it may
narrow down the possibilities.

As far as the Calls table goes, if the information is being stored there
correctly, you could run a simple script like the one below to find out who
had that IP address at what time...

select "End of Call"=CallDate,
"Seconds online"=AcctSessionTime
from Calls
where FramedAddress = '' /* whatever the IP address was */
and AcctStatusType = 2 /* stop records */
order by CallDate

Josh Hillman