[tac_plus] seeing lots of Read -1 bytes from router.example.net , expecting 12

Kiss Gabor (Bitman) kissg at ssg.ki.iif.hu
Sat Jun 2 06:46:45 UTC 2012


> Am I experiencing a bug?
> 
> I am running tac_plus F4.0.4.19
> 
> I see 110444 of the following type of error in 14 hrs.
> 
> Jun  1 16:36:27 hlr-tacacs-01 tac_plus[17512]: Read -1 bytes from
> router.example.net , expecting 12

It seems to be rather an "attack".
Somebody continously connect to router.example.net then disconnects.
The router does the same with your TACACS+ server.

Gabor


More information about the tac_plus mailing list