arpwatch!


 
Thread Tools Search this Thread
Special Forums Cybersecurity arpwatch!
# 1  
Old 02-24-2006
arpwatch!

I want to configure arpwatch for ip-level security for some of the machine on the network.

network is
10.129.112.0/25

but i want to look at those arp request which has ip from
10.129.112.160-179

and only(these machines)

arpwatch -n 10.129.112.160/27 -d

will give lot of entries other than my network devices.
how do i do it?
Login or Register to Ask a Question

Previous Thread | Next Thread

1 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

parse an arpwatch file and retain most recent mac

Hi, I'm working on a little script, for first I transformed epoch (unix date in seconds) in a human readable date in this way cat arp.dat | sort -k 3 | gawk '{ print strftime("%d:%m:%Y:%H:%M", $3),$1,$2}' the result is 06:03:2006:10:01 0:a:e4:c0:b5:6d 192.168.1.3 06:03:2006:12:15... (8 Replies)
Discussion started by: CM64
8 Replies
Login or Register to Ask a Question
ARPFETCH(8)						      System Manager's Manual						       ARPFETCH(8)

NAME
arpfetch - obtain ethernet/ip address pairings via snmp SYNOPSIS
arpfetch host cname DESCRIPTION
arpfetch gets pairings between ip addresses and the ethernet address of the corresponding network card. These pairings are retrieved from other network entities, like routers, by the SNMP protocol using snmpwalk(1). Mostly, this program is an agent that is used to get data for arpsnmp(8). This fetching of address mappings can be further automated by use of bihourly(8). Both command arguments must be present for proper operation. The host argument is the hostname of the network entity being queried and the cname argument is the SNMP community name of the network entity. The information is presented on stdout in a format compatible with arpsnmp(8) and arpwatch(8). Further information about SNMP can be found in snmpcmd(1) and variables(5). SEE ALSO
arpsnmp(8), arpwatch(8), bihourly(8), snmpwalk(1), snmpcmd(1), variables(5) BUGS
Please send bug reports to arpwatch@ee.lbl.gov. AUTHORS
Craig Leres of the Lawrence Berkeley National Laboratory Network Research Group, University of California, Berkeley, CA. The current version is available via anonymous ftp: ftp://ftp.ee.lbl.gov/arpwatch.tar.gz This manual page was contributed by Hugo Graumann. ARPFETCH(8)