Message 2: Re: Nukers
from "Josh Hillman" <admin-maillist@talstar.com>
Message 3: AcctStatusType in serverports
from "Frank Nowling" <frankn@netropolis.net>
Message 4: Re: AcctStatusType in serverports
from "Josh Hillman" <admin-maillist@talstar.com>
Message 5: RV: No CISCO logins are displayed on Cal
from siglesias@nec.com.ar
..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 1 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: Nukers
From: "Richard Sensale" <richards@visitus.net>
Date: Mon, 27 Jul 1998 10:34:45 -0400
Hi folks
Up until today I have not needed a way to track callers but I just got a
call from an irate person who had been nuked. According to the user, it
came from one of my IPs. I need to know if there is a way to pull start and
stop records for a certain time and date period out of radius somehow. for
some reason our log files have stopped recording.
Richard Sensale
Network Administrator
VisitUs Internet, Inc.
5468 Schaefer Road
Dearborn, MI 48126
(313) 945-5588
(313) 945-0202 fax
richards@visitus.net
http://www.visitus.net
..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 2 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: Re: Nukers
From: "Josh Hillman" <admin-maillist@talstar.com>
Date: Mon, 27 Jul 1998 11:15:35 -0400
> From: Richard Sensale <richards@visitus.net>
> Up until today I have not needed a way to track callers but I just got a
> call from an irate person who had been nuked. According to the user, it
> came from one of my IPs. I need to know if there is a way to pull start
and
> stop records for a certain time and date period out of radius somehow.
for
> some reason our log files have stopped recording.
They're only logged in the Calls table, unless you have Radius spitting the
info out into text files somewhere.
One thing you might do is look at your mailserver logs for anything with a
matching IP address that happened to do something with mail at about the
same time that one person was nuked. It may not be precise, but it may
narrow down the possibilities.
As far as the Calls table goes, if the information is being stored there
correctly, you could run a simple script like the one below to find out who
had that IP address at what time...
select "End of Call"=CallDate,
Username,
"Seconds online"=AcctSessionTime
from Calls
where FramedAddress = '123.123.123.123' /* whatever the IP address was */
and AcctStatusType = 2 /* stop records */
order by CallDate
Josh Hillman
hillman@talstar.com
..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 3 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: AcctStatusType in serverports
From: "Frank Nowling" <frankn@netropolis.net>
Date: Mon, 27 Jul 1998 11:34:53 -0500
What does the data in this field indicate? I get 1's and 2's in it, but I'm
haven't been able to locate a meaning.
TIA
Frank
..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 4 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: Re: AcctStatusType in serverports
From: "Josh Hillman" <admin-maillist@talstar.com>
Date: Mon, 27 Jul 1998 13:32:46 -0400
> From: Frank Nowling <frankn@netropolis.net>
> What does the data in this field indicate? I get 1's and 2's in it, but
I'm
> haven't been able to locate a meaning.
1 = start record; the user is still online (according to radius and/or the
database
2 = stop record; the user's session already ended.
Josh Hillman
hillman@talstar.com
..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 5 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: RV: No CISCO logins are displayed on Cal
From: siglesias@nec.com.ar
Date: Mon, 27 Jul 1998 16:56:27 -0400
Message is sent with MIME. Attachments are base64 encoded
--TFS-with-MIME-and-DIME
Content-Type: text/plain; charset=ISO-8859-1
Content-transfer-encoding: quoted-printable
Dear Dale:
I urgently need some advice to overcome the problems I have prevoiusly =20
reported you. Our client is not able to bill yet. Thanks in advance.
-----Mensaje original-----
De: Iglesias Sergio
Enviado el: Mi=E9rcoles 22 de Julio de 1998 19:20
Para: 'Dale E. Reed Jr.'
CC: 'Emerald ML'; 'RadiusNT ML'
Asunto: No CISCO logins are displayed on CallOnLine (2)
Importancia: Alta
Dear Dale:
Hello again. I have more questions for you.
1) Regarding to CISCO OnLine Calls, I followed your suggestions (repeat =20=
=20
the Server's entries for the LAN's IP addresses), but it worked only for =20
one NAS (200.16.186.222), whose calls were displayed in the OnLine tab. =20
With the rest of the CISCOs it happened the following:
a) One of them (200.16.186.237) was writing the events on the calls =20
table, but there was no way to watch them in the OnLine tab.
b) The other neither were looged into the calls table nor were showed in =20=
=20
the OnLine tab.
I am attaching a partial query of the Calls table to let you analyze the =20=
=20
differences between the case of the 200.16.186.237 and the 200.16.186.222 =20=
=20
(PS look at the NASPortType column of the attached query). Besides, do =20
you have any other idea about the [[ CALLS0~1.RPT : 4885 en CALLS0~1.RPT =20
]]est of the CISCOs?
=20
2) When I try to perform a Summary on the Batch tab I get the following =20
message:
No consolidation needed
What does it mean? How can I get the consolidation so as to bill the =20
services?
3) I have implemented the email-only filter by using the =20
Ascend-DataFilter attribute. It works properly when you access the node =20
throught the MAX 4000, of course; but it doesn't work if you access using =20=
=20
one o the CISCOs. Does anyone know if CISCO IOS support such attributes, =20
and which version it is? I suppose that this filter may be built using =20
the standard RADIUS attributes. Is it correct?
Thank for your support.
Ing. Sergio Iglesias
System Development Department
Technology Division
NEC Argentina S.A.
Av. San Martin 5020 (1601) Florida Pcia. Bs. As. Argentina
TE +54-1-7306067
FX +54-1-7306060
EM siglesias@nec.com.ar
--TFS-with-MIME-and-DIME
Content-Type: application/octet-stream; name="CALLS0~1.RPT"
Content-transfer-encoding: base64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--TFS-with-MIME-and-DIME--