Interpreting PPP logfile

Is there some sort of guide to interpreting the output of a ppp
logfile? Ok, some lines are simple to understand.

sent [PAP AuthReq id=0x1 user="anything" password=<hidden>]

Means that My computer just sent my username and password. But what
the hell does the next line mean??

rcvd [LCP ProtRej id=0x0 80 fd 01 01 00 0f 1a 04 78 00 18 04 78 00 15
03 2f]

The peer rejected my protocol? I looked in the PPP HOW-TO and man pppd
but found nothing. Is this where you have to read the source code?

In article <(E-Mail Removed)> ,
Steven Feil <(E-Mail Removed)> wrote:
>Is there some sort of guide to interpreting the output of a ppp
>logfile? Ok, some lines are simple to understand.
>
>sent [PAP AuthReq id=0x1 user="anything" password=<hidden>]
>
>Means that My computer just sent my username and password. But what
>the hell does the next line mean??
>
>rcvd [LCP ProtRej id=0x0 80 fd 01 01 00 0f 1a 04 78 00 18 04 78 00 15
> 03 2f]
>
>The peer rejected my protocol? I looked in the PPP HOW-TO and man pppd
>but found nothing. Is this where you have to read the source code?

It means that your machine sent a request to negotiate compression on
the link using CCP (the Compression Control Protocol), and that the peer
doesn't know that protocol at all. Depending on the PPP you're using,
you probably want to use the 'noccp' option. Even so, the way PPP works,
this message is harmless and your link should still work if this happens.

========= For LAN/WAN Protocol Analysis, check out PacketView Pro! =========
Patrick Klos Email: (E-Mail Removed)
Klos Technologies, Inc. Web: http://www.klos.com/
==================== What goes around, comes around... =====================

Steven Feil <(E-Mail Removed)> wrote:
> Is there some sort of guide to interpreting the output of a ppp
> logfile? Ok, some lines are simple to understand.

There's no good Internet site I know about that documents the
not-so-simple raw PPP link negotiation messages (such as the one
you ask about below) in a tutorial manner.

> sent [PAP AuthReq id=0x1 user="anything" password=<hidden>]

> Means that My computer just sent my username and password. But what
> the hell does the next line mean??

It rejects all data compression algorithms by rejecting Compression
Control Protocol (CCP), which PPP uses to negotiate data compression
algorithms. The peer PPP implementation is not capable of, or is not
configured for, any type of PPP data compression.

> rcvd [LCP ProtRej id=0x0 80 fd 01 01 00 0f 1a 04 78 00 18 04 78 00 15
> 03 2f]

> The peer rejected my protocol? I looked in the PPP HOW-TO and man pppd
> but found nothing. Is this where you have to read the source code?

Or the RFCs. There is also a book by James Carlson, "PPP Design,
Implementation, and Debugging" that can help and uses examples
from pppd. But it is not pppd or Linux specific and probably not
appropriate for the only mildly curious.

--
Clifford Kite Email: "echo xvgr_yvahk-(E-Mail Removed)|rot13"
PPP-Q&A links, downloads: http://ckite.no-ip.net/
/* Speak softly and carry a sucker rod (See man syslogd, footnote to
recommendation 4 under SECURITY THREATS). */