Protocol ppp_chap

This module parses PPP CHAP packets as defined in RFC 1194.

Events

Name	Payload associated	Description
ppp_chap_challenge_response	no	Contains all the information contained in a challenge or response packet.
ppp_chap_success_failure	no	Contains all the information contained in a success or failure packet.

The compound events ppp_chap_mschapv2_auth and ppp_chap_md5_auth from analyzer_ppp_chap bind those events and give the raw encryption material.

This event is generated for each challenge or response packet.

Field	Type	Description
code	uint8	The code is 1 for challenge, 2 for response.
identifier	uint8	Authentification attempt identifier.
value	bytes	Byte string containing the value if any.
name	string	Name provided in the packet.

This event is generated for each reply success or failure packet from the server.

Field	Type	Description
code	uint8	The code is 3 for success, 4 for failure.
identifier	uint8	Authentication attempt identifier.
message	string	Result message from the server.

Name	Type	Description
code	uint8	Packet code.
identifier	uint8	Authentication identifier.

Name	Type	Default value	Description
auth_timeout	uint32	60	Number of seconds to wait for the authentication to complete.