pppoe client dialing log

RouterOS The User Manager
1

Hello

I am new to this forum as a member but not as a reader.

I have a rb1100ahx2 with a pppoe server on it. Clients connects to server directly not using a user manager or any radius server, and secrets are stored on rb

Any client of mine, tries to connect with user and/or pass that are not in secret list

I can see them to log, in this case I can take the username he/she is using.

My question is: How can I find the password he/she is using ??

I installed a syslog to the pc near rb, and added a log rule for pppoe. There are appeared many information for the dialing, but password is not


thanks in advance

2

Try with a log rule with pppoe and debug topic but I think is encripted or the routerOS can not show you.

Send from my mobile phone using Tapatalk.

3

just done as I wrote to the first post, here I am pasting some logs. do you think is password here ?

2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,debug,packet xxxxx: session-id=0x0000
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,debug,packet xxxxx: service-name=
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,debug,packet xxxxx: host-uniq=0xb88
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,debug,packet xxxxx: bridge1: sent PADO to yy:yy:yy:yy:yy:yy
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,debug,packet xxxxx: session-id=0x0000
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,debug,packet xxxxx: host-uniq=0xb88
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,debug,packet xxxxx: service-name=
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,debug,packet xxxxx: ac-name=zzzzzz
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,debug,packet xxxxx: bridge1: rcvd PADR from yy:yy:yy:yy:yy:yy
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,debug,packet xxxxx: session-id=0x0000
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,debug,packet xxxxx: service-name=
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,debug,packet xxxxx: host-uniq=0xb88
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,info xxxxx: PPPoE connection established from yy:yy:yy:yy:yy:yy
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,info xxxxx: : waiting for call…
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug xxxxx: : LCP lowerup
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug xxxxx: : LCP open
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,debug,packet xxxxx: bridge1: sent PADS to yy:yy:yy:yy:yy:yy
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,debug,packet xxxxx: session-id=0xeb30
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,debug,packet xxxxx: host-uniq=0xb88
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,debug,packet xxxxx: service-name=
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: : rcvd LCP EchoReq id=0xb4
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <magic 0x13ad>
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: : sent LCP EchoRep id=0xb4
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <magic 0xb86b011>
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: : rcvd LCP ConfReq id=0x1
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <mru 1400>
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <magic 0x4447f7b6>
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: : sent LCP ConfReq id=0x1
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <mru 1480>
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <magic 0x752a91f0>
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx:
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: : sent LCP ConfAck id=0x1
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <mru 1400>
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <magic 0x4447f7b6>
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: : rcvd LCP EchoReq id=0xba
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <magic 0x17c7>
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: : sent LCP EchoRep id=0xba
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <magic 0x26d50dde>
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: : rcvd LCP ConfNak id=0x1
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx:
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: : sent LCP ConfReq id=0x2
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <mru 1480>
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <magic 0x752a91f0>
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx:
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <4f57>: sent LCP EchoReq id=0x73
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <magic 0x1f8f91a7>
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: : rcvd LCP EchoReq id=0x1a
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <magic 0x8b000f>
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: : sent LCP EchoRep id=0x1a
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <magic 0x41f3b520>
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <4f57>: rcvd LCP EchoReq id=0xb2
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <magic 0x14b3>
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <4f57>: sent LCP EchoRep id=0xb2
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <magic 0x1f8f91a7>
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: : rcvd LCP ConfNak id=0x2
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx:
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: : sent LCP ConfReq id=0x3
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <mru 1480>
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <magic 0x752a91f0>
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx:
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <4f57>: rcvd LCP EchoRep id=0x73
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <magic 0x14b3>
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: : rcvd LCP ConfAck id=0x3
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <mru 1480>
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <magic 0x752a91f0>
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx:
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug xxxxx: : LCP opened
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: : sent CHAP Challenge id=0x1
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx:
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx:
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: : rcvd LCP EchoReq id=0x0
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <magic 0x4447f7b6>
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: : sent LCP EchoRep id=0x0
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: <magic 0x752a91f0>
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: : rcvd CHAP Response id=0x1
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx:
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx:
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: : sent CHAP Failure id=0x1
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: bad username or password
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug xxxxx: : peer authentication failed for remote host
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug xxxxx: : LCP close
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug xxxxx: : LCP closed
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: : sent LCP TermReq id=0x4
2014-01-16 19:48:03 Local7.Debug 192.168.168.1 pppoe,ppp,debug,packet xxxxx: user xxxxx authentication failed<000>