It means its being truncated. Try adjusting the snaplen. You should be
able to do -s 0 to make sure you capture the entire packet or you can
specify a length such as -s 1024. Do a man tcpdump and search for
snaplen.
ie: tcpdump -i fxp0 -s 0 udp port 1812
-Dusty Doris
On Tue, 16 Nov 2004, jesk wrote:
> I have a question to tcpdumping FreeRADIUS.
> in some auth-replies there a missing some attributes but instead of them i
> can see at the end of a tcpdump line the following:
> "[|radius]"
>
> what does this exactly mean?
>
> f.e.:
> ---
> 12:58:05.215548 x.x.x.x.1645 > x.x.x.x.1645: rad-access-accept 217 [id 14]
> Attr[ Framed_ipaddr{10.10.10.10} [|radius]
> ---
>
> normaly i can see a lot of more output:
> ---
> 13:14:56.867709 x.x.x.x.1645 > x.x.x.x.1645: rad-access-accept 38 [id 37]
> Attr[ Framed_ipaddr{11.1.1.11} Framed_proto{PPP} Service_type{Framed} ]
> ---
>
> does somebody have an idea?
>
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
