[Help-gnu-radius] Strange accounting logs

[Bill Davidson]

Hi:

I have seen questions about this in the list archives, but no useful answers. 
 I am using GNU Radius with a Lucent/Ascend MAX 6000 NAS.  Every now and then 
(well, many times a day) I get a set of entries like this in my radius log 
file:

Nov 15 11:25:58: Auth.notice: Login OK: [superv]: CLID unknown (from nas 
max6k)
Nov 15 11:26:15: Acct.notice: NOT writing wtmp record (1) for `',NAS 
max6k,port 2
Nov 15 11:26:17: Acct.info: login: entry for NAS 24.222.26.2 port 2 duplicate
Nov 15 11:26:17: Acct.notice: NOT writing wtmp record (1) for `',NAS 
max6k,port 2
Nov 15 11:26:19: Acct.info: login: entry for NAS 24.222.26.2 port 2 duplicate
Nov 15 11:26:19: Acct.notice: NOT writing wtmp record (1) for `',NAS 
max6k,port 2
Nov 15 11:26:24: Acct.info: login: entry for NAS 24.222.26.2 port 2 duplicate
Nov 15 11:26:24: Acct.notice: NOT writing wtmp record (1) for `',NAS 
max6k,port 2
Nov 15 11:26:26: Acct.info: login: entry for NAS 24.222.26.2 port 2 duplicate
Nov 15 11:26:26: Acct.notice: NOT writing wtmp record (1) for `',NAS 
max6k,port 2
Nov 15 11:26:28: Acct.info: login: entry for NAS 24.222.26.2 port 2 duplicate
Nov 15 11:26:28: Acct.notice: NOT writing wtmp record (1) for `',NAS 
max6k,port 2
Nov 15 11:26:28: Auth.notice: Login OK: [maxwell]: CLID unknown (from nas 
max6k)

The d"uplicate entry"/"NOT writing..." pairs always come in sets of 6.

At the same time, the output of radwho looks like:

     Login             Name What  TTY     When     From        Location
lynnjem    lynnjem           PPP   S063  Fri 11:25 max6k     mdm-52.supercity
                             4294  S002  Fri 11:22 max6k
lmathews   lmathews          PPP   S062  Fri 11:18 max6k     mdm-36.supercity

So port 2 is in state "4294" -- what does this mean?  Where are the duplicate 
accounting packets coming from?  I thought at first that this was happening 
when a connection terminated, but lots of connections come and go without a 
problem.

Does anybody know what this is all about?  Thanks for any help.



-- 
Bill Davidson
address@hidden