Hi, > destination acct_radius { pipe("/var/log/mysql.pipe" \ > template("UPDATE radacct SET FramedIPAddress = > SUBSTRING_INDEX(SUBSTRING_INDEX('$MSG','on ',-1),' to',1) \ > WHERE TIMESTAMPDIFF(SECOND,AcctStartTime,CONCAT('$YEAR-$MONTH-$DAY',' > ','$HOUR:$MIN:$SEC')) <= 180 AND \ > REPLACE(REPLACE(CallingStationId,'-',''),':','') = > REPLACE(SUBSTRING(SUBSTRING_INDEX('$MSG','to ',-1),1,17),':','') \ > AND FramedIPAddress = \"\" ;\n") template-escape(yes)); > }; > > but my FramedIPAddress field still got this strange ip adress 3.118.236.192 > > somebody has a clue?
<wild guess> 192.236.118.3 - which was the last address the client had and is therefore doing a DHCP request for - hence its appearing it your logs...and into your system </wild guesS> or it might even be 3.118.236.192 - you never know what people do with their own networks(!) - look at the live logs that syslog-ng is muching on to see what you see... or tcpdump in full debug/text mode the DHCP process. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html