Re: (PM) Monitoring RADIUS port

Ryan Mooney (ryan@pcslink.com)
Fri, 12 Jun 1998 10:57:46 -0700 (MST)

Actually you could fire a packet at the port and look for an ICMP port
unreachable message from the server which would indicate that the port
is down... For some sample code you can see nmap:
www.dhp.com/~fyodor/nmap/
which does this. Note that this CAN (if not carefully done) crash some
radius servers, and its not always 100% accurate depending on whether you
filter things, have weird hosts, etc....

Good luck :)

> First, you are monitoring UDP port 1645, not TCP port 1645, right?
>
> Second, there is no, easy way to do this. With TCP, you can connect
> to the port and assume that the process ( http, ftp, smtp, etc. ) is
> alive and working, as the port is being listened on. However since
> Radius uses UDP, which is a stateless protocol, unless you can get the
> server to send a response back, you have no way of knowing whether the
> UDP packets you sent were received.
>
> If you want a way to send a 'radius ping' you will have to determine a
> way to build your own Radius Packet, and send it to the server. The
> RFC describing the Radius protocol can be found at:
>
> http://www.cabletron.com/support/internet/RFC/rfc2138.txt
>
> Two radius codes you may want to play around with, ( note the
> experimental ), are:
>
> 12 Status-Server (experimental)
> 13 Status-Client (experimental)
>
> Or you could construct an actual Access Request if you want to go that
> far.
>
> The short answer, which I think you were looking for, is that there isn't
> an easy way to do this, as it uses UDP. :\

>-=-=-=-=-=-=-<>-=-=-=-=-=-<>-=-=-=-=-=-<>-=-=-=-=-=-<>-=-=-=-=-=-=-<
Ryan Mooney Phone (602)265-9188 PCSLink
ryan@pcslink.com Internet Services
NT is an excellent choice for managers who need to show that they used
up their fiscal year budget for hardware/software expenditures.
<-=-=-=-=-=-=-><-=-=-=-=-=-><-=-=-=-=-=-><-=-=-=-=-=-><-=-=-=-=-=-=->
-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.
Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>