<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Aptos;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Aptos",sans-serif;
mso-ligatures:standardcontextual;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:11.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#467886" vlink="#96607D" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Darren,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I appreciate your response. I did follow the example and this is what I have in my config:<o:p></o:p></p>
<p class="MsoNormal"> "hooks-libraries": [<o:p></o:p></p>
<p class="MsoNormal"> {<o:p></o:p></p>
<p class="MsoNormal"> "library": "/usr/lib/x86_64-linux-gnu/kea/hooks/libdhcp_legal_log.so",<o:p></o:p></p>
<p class="MsoNormal"> "parameters": {<o:p></o:p></p>
<p class="MsoNormal"> "path": "/var/log/kea",<o:p></o:p></p>
<p class="MsoNormal"> "base-name": "kea-forensic4"<o:p></o:p></p>
<p class="MsoNormal"> }<o:p></o:p></p>
<p class="MsoNormal"> },<o:p></o:p></p>
<p class="MsoNormal">But in my kea-forensic4 log, I have this entry:<o:p></o:p></p>
<p class="MsoNormal">“identified by circuit-id: 00:04:00:00:00:06 and remote-id: 00:06:ac:3a:67:d6:de:f2”<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have confirmed via tcpdump that the server is receiving a string of characters as the circuit ID from my access gear.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I am not sure what I am missing.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:12.0pt">Thanks,</span><o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-size:16.0pt;color:#8A000A">Jim Springsteen</span></b><span style="font-size:16.0pt;color:#8A000A"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:13.0pt;color:black">Data Administrator<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><a href="mailto:jim.springsteen@southslope.com"><span style="color:#0563C1">jim.springsteen</span><span style="color:black">@southslope.com</span></a> |
<a href="http://www.southslope.com/"><span style="color:black">southslope.com</span></a></span><span style="font-size:12.0pt;font-family:"Calibri",sans-serif"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><a href="tel:3196262211"><span style="color:black">319-626-2211</span></a> main |
<a href="tel:3196655334"><span style="color:black">319-665-5334</span></a> direct<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">980 North Front St, North Liberty, IA 52317<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><br>
</span><a href="https://www.southslope.com/" target="_blank"><span style="font-size:12.0pt;color:blue;text-decoration:none"><img border="0" width="225" height="60" style="width:2.3437in;height:.625in" id="_x0000_i1025" src="https://www.southslope.com/wp-content/uploads/2019/12/SouthSlope_Email_Logo.png"></span></a><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>