ARPSNMP
Section: Maintenance Commands (8)
Index Return to Main Contents
BSD mandoc
NAME
arpsnmp - keep track of ethernet/ip address pairingsSYNOPSIS
[-dqs ] [-D arpdir ] [-f datafile ] [-w watcher@email ] [-W watchee@email ] file ...DESCRIPTION
keeps track of ethernet/ip address pairings. It syslogs activity and reports certain changes via email. reads information from a file (usually generated by snmpwalk(3)).The format of the input file is the same as arp.dat the mac address, ip address, optional timestamp and optional simple hostname. If the timestamp is missing, the current date is used.
can also be used to merge arp.dat files. If the same ethernet/ip address pair occurs in more than one file, the timestamp from the last seen is saved.
The -C flag (default) uses compact padded ethernet addresses in arp.dat e.g. 0:8:e1:1:2:d6.
The -d flag is used enable debugging. This also inhibits mailing the reports. Instead, they are sent to stderr
The -D flag is used to specify the arpwatch working directory. This defaults to /usr/local/arpwatch
The -f flag is used to set the ethernet/ip address database filename. The default is arp.dat
Note that an empty arp.dat file must be created before the first time you run arpsnmp.
The -q flag suppresses reports being logged or printed to stderr
The -s flag suppresses reports sent by email.
The -w flag is used to specify the target address for email reports. The default is root
The -W flag is used specifies the from address for email reports. The default is root
The -Z flag uses zero padded ethernet addresses in arp.dat e.g. 00:08:e1:01:02:d6.
REPORT MESSAGES
See the arpwatch(1) man page for details on the report messages generated by arpsnmp(1).FILES
- /usr/local/arpwatch
- default directory
- arp.dat
- default ethernet/ip address database
- ethercodes.dat
- vendor ethernet block list
SEE ALSO
arpwatch(8), snmpwalk(8), arp(8),AUTHORS
An Craig Leres of the Lawrence Berkeley National Laboratory Network Research Group, University of California, Berkeley, CA.The current version is available via anonymous ftp:
ftp://ftp.ee.lbl.gov/arpwatch.tar.gz
BUGS
Please send bug reports to ⟨arpwatch@ee.lbl.gov⟩It doesn't make any sense to feed the arp.dat file.
Attempts are made to suppress DECnet flip flops but they aren't always successful.
Index
- NAME
- SYNOPSIS
- DESCRIPTION
- REPORT MESSAGES
- FILES
- SEE ALSO
- AUTHORS
- BUGS