HP-UX AAA Server A.08.02.10 Administrator's Guide HP-UX 11i v3 (T1428-90093, November 2013)

After the first line of a session record, each A-V pair in the accounting message that triggered the
logging activity is listed.
NOTE: The default session format (Merit) corresponds to the log_v2_0 setting for the aatv
parameter in the log.config file, see “The log.config File ” (page 397). Alternate formats,
Livingston for example, may be specified.
Time-Based Values
Started at: This is the time when the session first arrived at the RADIUS server. It is the
number of seconds since 00:00:00 GMT, Jan. 1, 1970.
Log-time: This is the difference between the time on the machine where and when this
log was written, and the start-time. This field is used to compress the data.
Connect time: How long (in seconds) the session was known to the local AAA Server host.
Client A-V Pairs
Represent attribute values that describe the client used for authentication and authorization.
User Entry A-V Pairs
The Access-ID, Time-limit, Service-class, and Filter values correspond to A-V pairs (User-Name,
Inner-Identity, Session-Timeout, Service-Class, and Filter-Id) that exist in the user profile that
corresponds to the session record.
Session Tracking
These non-configurable attributes are used by the server to track sessions.
Reason: Why the record was generated. This is an integer that may be any one of the following:
Table 31 Reasons Why The Record Was Generated
DescriptionBilled/InfoIntegerReason
Normal disconnect: Modem-Stop record was received for
this session.
Billed0AC_NORMAL
Rejected by this LAS: Access rejected by this LAS.Info1AC_REJECT
Access rejected by someone: Access was rejected after
session was authorized. Modem-Cancel record was received
for this session.
Info2AC_CANCEL
Session over maximum time allowed: Session was on for
longer than was authorized.
Billed4AC_OVERTIME
Session ended for unknown reason: Stop (instead of
Modem-Stop) record was received for this session.
Billed5AC_UNKNOWN
Rejected by LAS: no token was available for this session.Info6AC_NOTOKEN
Session not local: This session was not local to this LAS, but
Modem-Stop was received.
Billed7AC_NOTLOCAL
Session suspended: No checkpoint was received for this
session for SESSIONIDLETIME seconds.
Billed8AC_SUSPEND
Authentication failed.Info9AC_FAILED
Session authorized: This record is intended for statistics only.Info10AC_AUTHORIZED
The session is released due to NAS reboot.Info11AC_NASREBOOT
The session is for a remote server, failed to forward.Info12AC_REMOTE
104 Logging and Monitoring