memeakp.blogg.se

Tcpdump -i eth0 -s 0 port 80 or port 443 and host -w portaltrace.pcapįor issues with LDAP Authentication tcpdump -i eth0 -s 0 port 389 or port 636 If one is troubleshooting wireless and wants to get some RFC3576 Information add in port 3799įor issues with the NAC Captive Portal here is a common example Tcpdump -i eth0 -s 0 port 1812 or port 3799 and host 1.2.3.4 -w radiusW3799.pcap

It is often used to see if one sees any traffic at all prior to capturing to a file. If one omits the -w radius.pcap, the information will print to the screen with limited detail. Tcpdump -i eth0 -s 0 port 1812 or port 1813 and host 1.2.3.4 -w radius.pcap In that case, add the IP address into that command. Note that it may be easier if you know the target device sending the radius packets. Tcpdump -i eth0 -s 0 port 1812 or port 1813 -w radius.pcap To limit capture size, read Additional notes below.įor issues with Radius or Authentication coming from a source switch or wireless controller use the below as example SSH to the NAC Appliance you wish to run the tcpdump command onįor ALL examples, use Control-C to stop the packet capture.