Guest User

temp56

a guest
Jul 11th, 2024
293
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.99 KB | None | 0 0
  1. radius mkreq: 0x20
  2. alloc_rip 0x00007f73a4d317e0
  3. new request 0x20 --> 20 (0x00007f73a4d317e0)
  4. got user 'vpnuser'
  5. got password
  6. add_req 0x00007f73a4d317e0 session 0x20 id 20
  7. RADIUS_REQUEST
  8. radius.c: rad_mkpkt
  9. rad_mkpkt: ip:source-ip=xxx.xxx.xxx.xxx
  10.  
  11. Parsed packet data.....
  12. Radius: Code = 1 (0x01)
  13. Radius: Identifier = 20 (0x14)
  14. Radius: Length = 746 (0x02EA)
  15. Radius: Vector: 32CACADABDCE9A8CB9B0DC82FBB57F74
  16. Radius: Type = 1 (0x01) User-Name
  17. Radius: Length = 9 (0x09)
  18. Radius: Value (String) =
  19. 76 70 6e 75 73 65 72 | vpnuser
  20. Radius: Type = 5 (0x05) NAS-Port
  21. Radius: Length = 6 (0x06)
  22. Radius: Value (Hex) = xxx
  23. Radius: Type = 30 (0x1E) Called-Station-Id
  24. Radius: Length = 15 (0x0F)
  25. Radius: Value (String) = xxx
  26. Radius: Type = 31 (0x1F) Calling-Station-Id
  27. Radius: Length = 15 (0x0F)
  28. Radius: Value (String) = xxx
  29. Radius: Type = 61 (0x3D) NAS-Port-Type
  30. Radius: Length = 6 (0x06)
  31. Radius: Value (Hex) = 0x5
  32. Radius: Type = 66 (0x42) Tunnel-Client-Endpoint
  33. Radius: Length = 15 (0x0F)
  34. Radius: Value (String) = xxx
  35. Radius: Type = 26 (0x1A) Vendor-Specific
  36. Radius: Length = 24 (0x18)
  37. Radius: Vendor ID = 311 (0x00000137)
  38. Radius: Type = 11 (0x0B) MS-CHAP-Challenge
  39. Radius: Length = 18 (0x12)
  40. Radius: Value (String) =
  41. e0 a8 52 c3 bd d2 56 09 b0 52 9a 10 48 0c 2d 01 | ..R...V..R..H.-.
  42. Radius: Type = 26 (0x1A) Vendor-Specific
  43. Radius: Length = 58 (0x3A)
  44. Radius: Vendor ID = 311 (0x00000137)
  45. Radius: Type = 25 (0x19) MS-CHAP2-Response
  46. Radius: Length = 52 (0x34)
  47. Radius: Value (String) =
  48. 00 00 cf e6 60 b2 06 ee e7 68 ca 35 f8 6b 10 d5 | ....`....h.5.k..
  49. 53 9f 00 00 00 00 00 00 00 00 55 21 b4 a5 76 d7 | S.........U!..v.
  50. 61 52 ac b2 d3 8c ca f7 40 23 89 7d 26 e7 a3 bb | aR......@#.}&...
  51. cf c9 | ..
  52. Radius: Type = 26 (0x1A) Vendor-Specific
  53. Radius: Length = 34 (0x22)
  54. Radius: Vendor ID = 9 (0x00000009)
  55. Radius: Type = 1 (0x01) Cisco-AV-pair
  56. Radius: Length = 28 (0x1C)
  57. Radius: Value (String) =
  58. 6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 6d | mdm-tlv=device-m
  59. 61 63 3d 75 6e 6b 6e 6f 77 6e | ac=unknown
  60. Radius: Type = 26 (0x1A) Vendor-Specific
  61. Radius: Length = 39 (0x27)
  62. Radius: Vendor ID = 9 (0x00000009)
  63. Radius: Type = 1 (0x01) Cisco-AV-pair
  64. Radius: Length = 33 (0x21)
  65. Radius: Value (String) =
  66. 6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 70 | mdm-tlv=device-p
  67. 68 6f 6e 65 2d 69 64 3d 75 6e 6b 6e 6f 77 6e | hone-id=unknown
  68. Radius: Type = 26 (0x1A) Vendor-Specific
  69. Radius: Length = 39 (0x27)
  70. Radius: Vendor ID = 9 (0x00000009)
  71. Radius: Type = 1 (0x01) Cisco-AV-pair
  72. Radius: Length = 33 (0x21)
  73. Radius: Value (String) =
  74. 6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 70 | mdm-tlv=device-p
  75. 6c 61 74 66 6f 72 6d 3d 61 6e 64 72 6f 69 64 | latform=android
  76. Radius: Type = 26 (0x1A) Vendor-Specific
  77. Radius: Length = 42 (0x2A)
  78. Radius: Vendor ID = 9 (0x00000009)
  79. Radius: Type = 1 (0x01) Cisco-AV-pair
  80. Radius: Length = 36 (0x24)
  81. Radius: Value (String) =
  82. 6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 70 | mdm-tlv=device-p
  83. 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d | latform-version=
  84. 31 33 | 13
  85. Radius: Type = 26 (0x1A) Vendor-Specific
  86. Radius: Length = 43 (0x2B)
  87. Radius: Vendor ID = 9 (0x00000009)
  88. Radius: Type = 1 (0x01) Cisco-AV-pair
  89. Radius: Length = 37 (0x25)
  90. Radius: Value (String) =
  91. 6d 64 6d 2d 74 6c 76 3d 63 6f 6d 70 75 74 65 72 | mdm-tlv=computer
  92. 2d 6e 61 6d 65 3d 47 61 6c 61 78 79 2d 53 32 30 | -name=Galaxy-S20
  93. 2d 46 45 | -FE
  94. Radius: Type = 26 (0x1A) Vendor-Specific
  95. Radius: Length = 44 (0x2C)
  96. Radius: Vendor ID = 9 (0x00000009)
  97. Radius: Type = 1 (0x01) Cisco-AV-pair
  98. Radius: Length = 38 (0x26)
  99. Radius: Value (String) =
  100. 6d 64 6d 2d 74 6c 76 3d 64 65 76 69 63 65 2d 74 | mdm-tlv=device-t
  101. 79 70 65 3d 73 61 6d 73 75 6e 67 20 53 4d 2d 47 | ype=samsung SM-G
  102. 37 38 30 47 | 780G
  103. Radius: Type = 26 (0x1A) Vendor-Specific
  104. Radius: Length = 91 (0x5B)
  105. Radius: Vendor ID = 9 (0x00000009)
  106. Radius: Type = 1 (0x01) Cisco-AV-pair
  107. Radius: Length = 85 (0x55)
  108. Radius: Value (String) =
  109. xxx | mdm-tlv=device-u
  110. xxx | id=xxx
  111. Radius: Type = 26 (0x1A) Vendor-Specific
  112. Radius: Length = 98 (0x62)
  113. Radius: Vendor ID = 9 (0x00000009)
  114. Radius: Type = 1 (0x01) Cisco-AV-pair
  115. Radius: Length = 92 (0x5C)
  116. Radius: Value (String) =
  117. xxx | mdm-tlv=device-u
  118. xxx | id-global=xxx
  119. Radius: Type = 4 (0x04) NAS-IP-Address
  120. Radius: Length = 6 (0x06)
  121. Radius: Value (IP Address) = xxx
  122. Radius: Type = 26 (0x1A) Vendor-Specific
  123. Radius: Length = 49 (0x31)
  124. Radius: Vendor ID = 9 (0x00000009)
  125. Radius: Type = 1 (0x01) Cisco-AV-pair
  126. Radius: Length = 43 (0x2B)
  127. Radius: Value (String) =
  128. 61 75 64 69 74 2d 73 65 73 73 69 6f 6e 2d 69 64 | audit-session-id
  129. 3d 63 30 61 38 30 31 30 31 30 30 30 31 36 30 30 | =c0a801010001600
  130. 30 36 36 38 66 37 38 66 34 | 0668f78f4
  131. Radius: Type = 26 (0x1A) Vendor-Specific
  132. Radius: Length = 34 (0x22)
  133. Radius: Vendor ID = 9 (0x00000009)
  134. Radius: Type = 1 (0x01) Cisco-AV-pair
  135. Radius: Length = 28 (0x1C)
  136. Radius: Value (String) =
  137. xxx | ip:source-ip=xxx
  138. Radius: Type = 26 (0x1A) Vendor-Specific
  139. Radius: Length = 26 (0x1A)
  140. Radius: Vendor ID = 3076 (0x00000C04)
  141. Radius: Type = 146 (0x92) Tunnel-Group-Name
  142. Radius: Length = 20 (0x14)
  143. Radius: Value (String) =
  144. 44 65 66 61 75 6c 74 57 45 42 56 50 4e 47 72 6f | DefaultWEBVPNGro
  145. 75 70 | up
  146. Radius: Type = 26 (0x1A) Vendor-Specific
  147. Radius: Length = 12 (0x0C)
  148. Radius: Vendor ID = 3076 (0x00000C04)
  149. Radius: Type = 150 (0x96) Client-Type
  150. Radius: Length = 6 (0x06)
  151. Radius: Value (Integer) = 6 (0x0006)
  152. Radius: Type = 26 (0x1A) Vendor-Specific
  153. Radius: Length = 21 (0x15)
  154. Radius: Vendor ID = 9 (0x00000009)
  155. Radius: Type = 1 (0x01) Cisco-AV-pair
  156. Radius: Length = 15 (0x0F)
  157. Radius: Value (String) =
  158. 63 6f 61 2d 70 75 73 68 3d 74 72 75 65 | coa-push=true
  159. send pkt xxx.xxx.xxx.xxx/1812
  160. rip 0x00007f73a4d317e0 state 7 id 20
  161. rad_vrfy() : response message verified
  162. rip 0x00007f73a4d317e0
  163. : chall_state ''
  164. : state 0x7
  165. : reqauth:
  166. 32 ca ca da bd ce 9a 8c b9 b0 dc 82 fb b5 7f 74
  167. : info 0x00007f73a4d31920
  168. session_id 0x20
  169. request_id 0x14
  170. user 'vpnuser'
  171. response '***'
  172. app 0
  173. reason 0
  174. skey 'xxxxxxxxxxxxx'
  175. sip xxx
  176. type 1
  177.  
  178. RADIUS packet decode (response)
  179.  
  180. --------------------------------------
  181. Raw packet data (length = 20).....
  182. 03 14 00 14 53 f8 2b 42 c1 a6 a0 71 fc 59 63 d7 | ....S.+B...q.Yc.
  183. e0 94 96 d9 | ....
  184.  
  185. Parsed packet data.....
  186. Radius: Code = 3 (0x03)
  187. Radius: Identifier = 20 (0x14)
  188. Radius: Length = 20 (0x0014)
  189. Radius: Vector: 53F82B42C1A6A071FC5963D7E09496D9
  190. rad_procpkt: REJECT
  191. Failed to find MS-CHAP-ERROR in radius REJECT message while expecting it!
  192. RADIUS_DELETE
  193. remove_req 0x00007f73a4d317e0 session 0x20 id 20
  194. free_rip 0x00007f73a4d317e0
  195. radius: send queue empty
  196.  
  197.  
Advertisement
Add Comment
Please, Sign In to add comment