Re: against illegal arp update

[ On , March 11, 2003 at 10:19:24 (+0100), Cedric Blancher wrote: ]
> Subject: Re: against illegal arp update
>
> Arpwatch is a tool that monitors ethernet trafic in order to detect

s/switched/bridged/ -- switches are just multi-port bridges. :-)

Also, for any SNMP-managed switch or bridge it's possible to monitor all MAC/IP assignments on any connected networks using something like arpsnmp, which is part of the ARPwatch package distribted by LBL.

        ftp://ftp.ee.lbl.gov/arpwatch.tar.gz

-- 
								Greg A. Woods

+1 416 218-0098;            ;           
Planix, Inc. ; VE3TCP; Secrets of the Weird 

----------------------------------------------------------------------------

Lose another weekend managing your IDS?
Take back your personal time.
15-day free trial of StillSecure Border Guard.
http://www.securityfocus.com/stillsecure"> 
http://www.securityfocus.com/stillsecure