How to collect RADIUS Accounting messages over UDP?

#1 hukel 2 years ago

Is there a combination of inputs and extensions that can be used to collect RADIUS accounting messages via UDP listener?

We use Microsoft NPS today, but could benefit from the forking and advanced parsing of NXLog. We send RADIUS accounting messages from multiple network devices and the differences in data layout are bit too much for NPS.

Permalink

#2 gahorvath Nxlog ✓ 2 years ago

#1 hukel

Is there a combination of inputs and extensions that can be used to collect RADIUS accounting messages via UDP listener? We use Microsoft NPS today, but could benefit from the forking and advanced parsing of NXLog. We send RADIUS accounting messages from multiple network devices and the differences in data layout are bit too much for NPS.

Hello Hugh,

It's not entirely clear to me what your use case is.

Are you trying to collect Radius accounting packets? What do you do with the data then?

We have a module im_pcap in NXLog Enterprise Edition that should be able to capture the packets and parse them to some extent, but I am not sure it would give you what you want. The module generally extracts protocol metadata not the payload.

Unfortunately we don't have an out of the box solution for this, but I'd be interested in learning more about your needs.

Gabor