Free radius software for linux

raddump interprets captured RADIUS packets to print a timestamp, packet length, RADIUS packet type, source and destination hosts and ports, and included attribute names and values for each packet.
Enhancements:
- Added support for IEEE 802.1q tagged VLAN frames.

Sysmon is a network monitoring tool designed to provide high performance and accurate network monitoring.
Currently supported tests include monitoring of SMTP, IMAP, HTTP, TCP, UDP, Radius, NNTP, and POP3 servers. It also includes the ability to ping hosts and routers, as well as the ability to perform SNMP queries and generate alerts based on those results.
Sysmon has the ability to understand real network topologies, including the ability to monitor multiple paths and only report the actual device that is down instead of a router that is down, and all the hosts behind it.
Enhancements:
- fix for crash/coredump with DNS check
- Darwin/OSX 10.4.x build cleanups
- reduce calls to time()
- new queuer for objects (may not work on all systems)
- numerous cleanups
- some excess noise reduced in logs
- add some checkpointing of icmp packets and timing
- minor dependency builder fixes
- allow sets to work in the root = object declaration

radclass is a PHP4 class that handles the administration of multiple IC-Radius servers.

radclass can add, delete, and update users and groups on foreign radius hosts, and it can modify their check items. radclass was designed in the PHP4 OO model to be a portable solution.

Unit Circle project shows the relationship between trigonometric and angles functions like sine and cosine. To do this, the program implements an interactive "unit circle" (radius = 1) diagram, where the user can click or drag to set angles and see how the values of trigonometric functions change accordingly.

The unit circle (where the radius equals 1) provides a very clear demonstration of how various trigonometric functions relate to angles and one another. Draw an angle line from the origin to a point on the circumphrence of the circle; the (x,y) coordinates of that point will will be the cosine and sine of the angle.

In Unit Circle, use the mouse to set the angle line by either clicking or dragging the pointer inside the diagram. Or, change the trigonmetric values in the fields, and the angle will automatically adjust.

The inspiration for this program was provided by my home-schooled daughters, who had difficulty understanding the nature of trigonometry. As an educational tool, Unit Circle has been a success, and it may evolve into a larger application for exploring other aspects of trigonometry and geometry.

SMTarPit is a chrooted SMTP honeypot and tarpit.

I wrote this program because I looked around the Internet for an SMTP Tarpit/Honeypot that was: written in Perl; and, was only an SMTP tarpit/honeypot - I couldnt find one.

SMTarPit is a combined SMTP honey 7187 7187pot and tarpit released under the GPL. It is writen in Perl so it should work on virtually any platform that supports Perl (except Windows). It uses xinetd which looks at port 25 (instructions in the tarball) and when someone calls it, smtarpit is launched and then it chroots itself. It then decides whether there is a man or a machine on the other end and sets about wasting their time.

There are plenty of instructions as to how to configure the program - if Perl is not your first language, you should still be able to see what to do. You will certainly need to put a valid domain name in there but it is all well laid out so that you can install it and run it as a part of xinetd.

If you are an ISP with a tarpitted connection, you can tell which one it is from the fact that the tarpitted connection has a paritcular profile of inactivity and persistancy that no normal SMTP connection has. With this in mind, you can look at your RADIUS logs and take action on the spammer - the one thing that you know from monitoring the connection is that there will be many mails to the same domain from the same source address and that none of them will be solicited as there is in reality nobody to solicit them.

Unsolicited bulk email equals spam and with the RADIUS logs, you can notify the authorities and have the spammer arrested and procecuted - or do nothing more than throw them off and let them spam another day. All spam connections are logged by the tarpit.

How does it work?

Every time an incoming call to port 25 happens, xinetd starts a copy of this server. It only has a small memory footprint and doesnt really consume much processor time.
When the server is started, it responds with the usual welcome message and then waits for the client to respond. When the client does respond, it looks at how long it took and tries to work out whether it is a man or machine at the other end (you can adjust this time in the program if you want).

If the server thinks that it is a machine at the other end, it goes into tarpit mode where everything takes a long time. In SMTP, the server response codes have a three figure number and if that is followed by a dash (-), the client has to wait until it receives one with a space after it. This can take an hour or so.

There are time-outs but you can make the response times all different to avoid profiling/finger-printing of the server - SMTarPit can do this automatically. While all of this is going on, the server is just sitting there, asleep. It doesnt take any significant processor time (arguably any at all) and only a few kB in memory. You can limit the number of concurrent servers with xinetd (explanation and example in the program file at the beginning) and impose any other limitations you want.

In other words, this server allows you to tarpit (stall) several spamming processes (up to the limit you define in the program and your xinetd configuration files) for hours at a time with only minor resource consumption on your part. You certainly wont see any bandwidth eaten away by it (50 Bytes per minute on average is typical).

pyrad is a Python RADIUS client.

pyrad contains several modules:

pyrad.client
RADIUS client class.
pyrad.dictionary
RADIUS dictionary support. Supports standard radiusd dictionaries and has preliminary support for the freeradius octets and abinary extensions.
pyrad.packet
A packet with a RADIUS request or reply. A packet object takes care of all the necessary data conversion allowing the programmer to only use standard python data types and RADIUS attribute names.
pyrad.server
Basic RADIUS server and proxy classes.
pyrad.tools
Utility functions, mostly used internally for data conversion

Simple example

Below is a simple example of how to use pyrad; it shows how to do an authentication request.

import pyrad.packet
from pyrad.client import Client
from pyrad.dictionary import Dictionary

srv=Client(server="radius.my.domain", secret="s3cr3t",
dict=Dictionary("dicts/dictionary", "dictionary.acc"))

req=srv.CreateAuthPacket(code=pyrad.packet.AccessRequest,
User_Name="wichert", NAS_Identifier="localhost")
req["User-Password"]=req.PwCrypt("password")

reply=srv.SendPacket(req)
if reply.code==pyrad.packet.AccessAccept:
print "access accepted"
else:
print "access denied"

print "Attributes returned by server:"
for i in reply.keys():
print "%s: %s" % (i, reply[i])

mysqlRadius is the world favorite Cistron 1.6.6 (and other) radius server manager. mysqlRadius can manage 1 or 100 RADIUS servers without a hiccup including redundant backup servers that transparently provide mysql accounting data via mysqlRadacct aux application.

Our mysqlISP component systems focus is on a very stable telco quality ISP services via static configuration of servers from mySQL, but with mySQL not required to be live.