ARPSNMP

NAME

arpsnmp - keep track of ethernet/ip address pairings

SYNOPSIS

arpsnmp [ -d ] [ -f datafile ] file [ ... ]

DESCRIPTION

Arpsnmp keeps track for ethernet/ip address pairings. It syslogs activity and reports certain changes via email. Arpsnmp reads information from a file (usually generated by snmpwalk(1)).

The -d flag is used enable debugging. This also inhibits mailing the reports. Instead, they are sent to stderr.

The -f flag is used to set the ethernet/ip address database filename. The default is arp.dat.

Note that an empty arp.dat file must be created before the first time you run arpsnmp.

REPORT MESSAGES

(See the arpwatch(8) man page for details on the report messages generated by arpsnmp(8).)

FILES

/usr/operator/arpwatch - default directory
arp.dat - ethernet/ip address database
ethercodes.dat - vendor ethernet block list

AUTHORS

Craig Leres of the Lawrence Berkeley National Laboratory Network Research Group, University of California, Berkeley, CA.

The current version is available via anonymous ftp:

: ftp://ftp.ee.lbl.gov/arpwatch.tar.gz

BUGS

Please send bug reports to arpwatch@ee.lbl.gov.

Attempts are made to suppress DECnet flip flops but they aren't always successful.