[svlug] arpwatch

[Dave Zarzycki]

On Tue, 10 Nov 1998, Alvin Oga wrote:

> what does it mean when arpwatch catches and reports
> a (new) IP#/MAC address of the ethernet cards on
> our local LAN for domain names we don't support ???

Huh? Could I see the message that it literally sends root? What is the
interface of the machine in question connected to?

> arpwatch comes by default? on rh-5.2...

And this is a *big* mistake for cable modem users. You will get a few
thousands messages to root the first day or so as arpwatch builds it's
database, and probably a few hundred a week as all sorts of ARP oddities
happen on the network. Unless you are ultra paranoid, arpwatch will drive
you nuts.

davez


--
echo "unsubscribe svlug" | mail majordomo at svlug.org
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ to unsubscribe