Re: How do I trace OSPF auth password

Thank you very much

On Wed, Jun 10, 2009 at 5:50 AM, Dale Shaw <dale.shaw_at_gmail.com> wrote:

> Hi,
>
> On Wed, Jun 10, 2009 at 4:55 AM, Jared Scrivener<jscrivener_at_ipexpert.com>
> wrote:
> > "Debug ip packet dump" should do it. Use an ACL that filters for just the
> > specific source of R1 and is destined to 224.0.0.5 as the input for the
> > debug. Then convert your hex output into ASCII with a tool (Ultraedit or
> > something similar) and look for a string. That's one way, but there's
> > probably a better one.
>
> Further to Jared's suggestion --
>
> "debug ip packet dump" shows OSPF hellos with the clear text password
> in the clear, so you don't need to convert anything.
>
> R1#sh run int fa0/0
> Building configuration...
>
> Current configuration : 152 bytes
> !
> interface FastEthernet0/0
> ip address 10.1.12.1 255.255.255.0
> ip ospf authentication
> ip ospf authentication-key HELLO
> duplex auto
> speed auto
> end
>
> R1#sh run | s router ospf
> router ospf 1
> log-adjacency-changes
>
> R1#conf t
> Enter configuration commands, one per line. End with CNTL/Z.
> R1(config)#router ospf 1
> R1(config-router)#network 10.1.12.1 0.0.0.0 area 0
> R1(config-router)#^Z
> R1#
>
> 3F400990: 45C0004C 000D0000 E@.L....
> 3F4009A0: 0159C285 0A010C01 E0000005 0201002C .YB.....`......,
> 3F4009B0: 01010101 00000000 EA9B0001 48454C4C ........j...HELL
> 3F4009C0: 4F000000 FFFFFF00 000A1201 00000028 O..............(
> 3F4009D0: 00000000 00000000 FFF60003 00010004 .........v......
> 3F4009E0: 00000001 ....
>
> (best viewed with a fixed width font)
>
> cheers,
> Dale
>
> > On 6/9/09 2:15 PM, "Fahad Khan" <fahad.khan_at_gmail.com> wrote:
> >
> >> Lets say I need to make adj between R1 and R2 connected via any media. I
> >> donot have the access of R1 and only have the access of R2. R1 is
> >> preconfigured but the problem is OSPF authentication(simple clear text
> >> auth) is also enabled on that, now how do i trace on R2 to get the
> password
> >> that is configured on R1 for ospf auth. Are there any debug options?
>

-- 
Muhammad Fahad Khan
IT Specialist
Global Technology Services, IBM
fahad_at_pk.ibm.com
+92-321-2370510
+92-301-8247638
http://www.linkedin.com/in/muhammadfahadkhan
http://fahad-internetworker.blogspot.com
Blogs and organic groups at http://www.ccie.net