1ARPSNMP(8) System Manager's Manual ARPSNMP(8)
2
3
4
6 arpsnmp - keep track of ethernet/ip address pairings
7
9 arpsnmp [ -d ] [ -f datafile ] [ -e username ] [ -s username ] file [
10 ... ]
11
13 Arpsnmp keeps track for ethernet/ip address pairings. It syslogs activ‐
14 ity and reports certain changes via email. Arpsnmp reads information
15 from a file (usually generated by snmpwalk(1)).
16
17 The -d flag is used enable debugging. This also inhibits mailing the
18 reports. Instead, they are sent to stderr.
19
20 The -f flag is used to set the ethernet/ip address database filename.
21 The default is arp.dat.
22
23 Note that an empty arp.dat file must be created before the first time
24 you run arpsnmp.
25
26 If the -e flag is used, arpsnmp sends e-mail messages to username
27 rather than the default (root). If a single `-' character is given for
28 the username, sending of e-mail is suppressed, but logging via syslog
29 is still done as usual. (This can be useful during initial runs, to
30 collect data without being flooded with messages about new stations.)
31
32 If the -s flag is used, arpsnmp sends e-mail messages with username as
33 the return address, rather than the default (root).
34
36 (See the arpwatch(8) man page for details on the report messages gener‐
37 ated by arpsnmp(8).)
38
40 /var/lib/arpwatch - default directory
41 arp.dat - ethernet/ip address database
42 ethercodes.dat - vendor ethernet block list
43
45 arpwatch(8), snmpwalk(1), arp(8)
46
48 Craig Leres of the Lawrence Berkeley National Laboratory Network Re‐
49 search Group, University of California, Berkeley, CA.
50
51 The current version is available via anonymous ftp:
52
53 ftp://ftp.ee.lbl.gov/arpwatch.tar.gz
54
56 Please send bug reports to arpwatch@ee.lbl.gov.
57
58 Attempts are made to suppress DECnet flip flops but they aren't always
59 successful.
60
61
62
634th Berkeley Distribution 17 September 2000 ARPSNMP(8)