Differences

This shows you the differences between two versions of the page.

--- raspberry_pi_arp_watcher [2019/03/10 04:13] – admin
+++ raspberry_pi_arp_watcher [2021/10/30 13:21] (current) – removed admin
@@ Line 1: / Line 1: @@
-=====Raspberry Pi - ARP watcher =====
-Keep track of ethernet/ip address pairings. It syslogs activity and reports certain changes via email.
-====Raspbian====
-  * Install Raspbian, connect the Pi to your network, the broadcast domain (subnet) you want to monitor.
-  * Configure the Pi as you would normally.
-    * Disable HDMI, WLAN, Bluetooth
-    * Configure firewall
-    * Remove pi user
-    * enable ipv6 privacy addressing
-    * Disable unnecessary services
-====Mail=====
-  * Configure outgoing mail. For example with a simple to use tool like ''ssmtp''. <code>apt install ssmtp mailutils</code>
-  * Test outgoing mail.
-====Arpwatch====
-  * Install arpwatch<code>apt install arpwatch
-systemctl stop arpwatch
-rm /var/lib/arpwatch/*     # remove already found hosts</code>
-  * Update the ethercodes<code>cd /usr/share/arpwatch/
-mv ethercodes.dat ethercodes.old
-curl -O https://linuxnet.ca/ieee/oui/ethercodes.dat
-</code>
-  * Script / crontab to update the file every month or so.
-  * Configure arpwatch ''/etc/arpwatch.conf''<code>eth0    -m <mail recipient></code>
-  * Enable and start arpwatch<code>systemctl enable arpwatch
-systemctl start arpwatch</code>
-{{tag>[hardware raspberry pi linux network arp watch mac]}}