ARPSNMP(8)ARPSNMP(8)NAMEarpsnmp - keep track of ethernet/ip address pairings
SYNOPSISarpsnmp [ -d ]
[ -f datafile ]
[ -s sendmail_path ]
[ -m addr ]
file [ ... ]
DESCRIPTION
Arpsnmp keeps track for ethernet/ip address pairings. It syslogs activ‐
ity and reports certain changes via email. Arpsnmp reads information
from a file (usually generated by snmpwalk(8)).
The -d flag is used enable debugging. This also inhibits mailing the
reports. Instead, they are sent to stderr.
The -f flag is used to set the ethernet/ip address database filename.
The default is arp.dat.
(Debian) The -s flag is used to specify the path to the sendmail pro‐
gram. Any program that takes the option -odi and then text from stdin
can be substituted. This is useful for redirecting reports to log files
instead of mail.
(Debian) The -m option is used to specify the e-mail address to which
reports will be sent. By default, reports are sent to root on the
local machine.
Note that an empty arp.dat file must be created before the first time
you run arpsnmp.
REPORT MESSAGES
(See the arpwatch(1) man page for details on the report messages gener‐
ated by arpsnmp(1).)
FILES
/var/lib/arpwatch - default directory
IFNAME.dat - ethernet/ip address database observed on interface IFNAME
ethercodes.db - vendor ethernet block list
SEE ALSOarpwatch(8), snmpwalk(8), arp(8)AUTHORS
Craig Leres of the Lawrence Berkeley National Laboratory Network Re‐
search Group, University of California, Berkeley, CA.
The current version is available via anonymous ftp:
ftp://ftp.ee.lbl.gov/arpwatch.tar.gz
BUGS
Please send bug reports to arpwatch@ee.lbl.gov.
Attempts are made to suppress DECnet flip flops but they aren't always
successful.
4th Berkeley Distribution 17 September 2000ARPSNMP(8)