I'll take a look later on into this issue.
It appears that it is crashing when a non-existent field is given in
an Extract statement.
In the meanwhile you want to change the radius field names to be
radius.Framed_IP_Address and radius.User_Name. As the radius field
names had changed since we added the radius dictionary files (and the
wiki wasn't updated).
Luis.
On 10/13/05, Michael Kopp (News) <mk.news@xxxxxxxxxx> wrote:
> Hi all,
>
>
I think I found a bug with Ethereal MATE Plugin and Radius stuff
>
> I created following mate config file (more or less copied from the Ethereal
> wiki)
>
> test.mate
>
> ====snip====
>
> Pdu radius_pdu Proto radius Transport udp/ip {
> Extract addr From ip.addr;
> Extract port From udp.port;
> Extract radius_id From radius.id;
> Extract radius_code From radius.code;
> Extract user_ip From radius.framed_addr;
> Extract username From radius.username;
> };
>
> Gop radius_req On radius_pdu (radius_id, addr, addr, port, port) {
> Start (radius_code {1|4|7} );
> Stop (radius_code {2|3|5|8|9} );
> Extra (user_ip, username);
> };
>
> ====snip====
>
> After I added the config file in my Ethereal preferences and try to start
> Ethereal again, Ethereal will not come up again and will crash during
> reading the configurations.
>
> This happens regardless if I load a sniffertrace with or without radius
> packets or simply just start Ethereal without loading a tracefile. Always
> the same result -> crash of Ethereal
>
> I tested on WinXP SP2 with Ethereal 0.10.12 and also with latest SVN version
> from buildbot : ethereal-setup-0.10.13-SVN-16217.exe
> WinPCAP is 3.1 final
>
> If I use MATE with some other protocols (GTP, etc ... ) I have no issues.
>
> If you need more info, I`m glad to help.
>
> Regards
> Michael
>
> BTW : there are some minor errors in the Mate Examples on the Wiki, should I
> change them ?
>
>
> --
> -----------------------------------
> Michael Kopp
> CCIE #8271 (R&S, Security)
> IsarNet AG
> Terminalstrasse Mitte 18
> 85356 München
> Tel.: 07000-isarnet
> http://www.isarnet.de
> http://www.isarflow.de
> -----------------------------------
>
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
>
--
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan
