radsniff(8)
NAME
radsniff - dump radius protocol
DESCRIPTION
radsniff is a simple wrapper around libpcap. It can also print out the contents of RADIUS packets using the FreeRADIUS dictionaries.
OPTIONS
- -a
-
List all interfaces which can be used to capture packets.
- -c count
-
Number of packets to capture. Exit after capturing count packets
- -C checksum_type
-
Enable checksum validation. Specify
udporradius. - -d config_dir
-
The directory that contains the user dictionary file. Defaults to
/etc/raddb. - -D dict_dir
-
The directory that contains the main dictionary file. Defaults to
/usr/share/freeradius/dictionary. - -e event[,event]
-
Only log requests with specific event flags. +
-
received - a request or response
-
norsp - no response was received to a request
-
rtx - retransmission of a request which was already seen
-
noreq - a response was seen with no matching request
-
reused - RADIUS ID field was reused too soon
-
error - error decoding the packet
-
- -F
-
Filter PCAP file from stdin to stdout. Output file will contain RADIUS packets.
- -f filter
-
PCAP filter. (default is
udp port 1812 or 1813) - -h
-
Print usage help information.
- -i interface
-
Capture from the named interface.
- -I filename
-
Read packets from filename.
- -l attr[,attr]
-
Output packet signature and a list of named xattributes.
- -L attr[,attr]
-
Use the named attributes tfor detecting retransmissions
- -m
-
Print packet headers only, not contents.
- -p port
-
Listen for packets on port.
- -P filename
-
Daemonize, and write PID to _filename_x
- -q
-
Print less debugging information.
- -r attribute-filter
-
RADIUS attribute request filter.
- -R attribute-filter
-
RADIUS attribute response filter.
- -s secret
-
RADIUS secret.
- -S
-
Sort attributes in the packet. Used to compare server results.
- -w filename
-
Write output packets to filename.
- -x
-
Print out debugging information.
The following options are for statistics gathering.
- -E
-
Print statistics in CSV format.
- -N prefix
-
The instance name passed to the collectd plugin.
- -O server
-
Write output statistics to the named collectd server.
- -T timeout
-
The timeout in milliseconds before the request is considered to be lost.
- -W interval
-
Write statistics every interval seconds.
AUTHOR
The FreeRADIUS Server Project (https://freeradius.org)