Ben's notes

Linux, Unix, network, radio...

Trace: • arpwatch

arpwatch

[network, security, arp, linux]

~~TOC~~

ARP monitoring with arpwatch

Prerequisites:

Make sure e-mail works

Install and configure arpwatch

Install aprwatch.
```
yum install arpwatch
```
Start arpwatch at boot.
```
chkconfig arpwatch on
```
Change config if needed, edit /etc/sysconfig/arpwatch.
Start arpwatch.
```
service arpwatch start
```

Example mail

subject: new station (apc.mgmt.polaire.nl)

           hostname: apc.mgmt.polaire.nl
         ip address: 1.2.3.4
   ethernet address: 0:c0:b7:95:ca:fe
    ethernet vendor: AMERICAN POWER CONVERSION CORP
          timestamp: Tuesday, June 24, 2014 21:48:39 +0200

arpwatch.txt · Last modified: 2014/06/24 21:49 by admin