parent
544be60a0d
commit
6d99e421e9
|
@ -0,0 +1,15 @@
|
||||||
|
# ArpWatch
|
||||||
|
Monitor stations on network
|
||||||
|
|
||||||
|
# Prerequisites
|
||||||
|
vlans
|
||||||
|
arpwatch
|
||||||
|
|
||||||
|
# Notes
|
||||||
|
* Ignore main interface on which vlans are set
|
||||||
|
|
||||||
|
# Configuration
|
||||||
|
* Add alias to drop the emails that are being sent
|
||||||
|
* add filter to syslog (rsyslog) to direct messages to special file
|
||||||
|
* fix arpwatch.conf to start daemon per interface (look at notes above)
|
||||||
|
* go
|
|
@ -0,0 +1 @@
|
||||||
|
nukemailz: /dev/null
|
|
@ -0,0 +1,8 @@
|
||||||
|
# prod setup
|
||||||
|
eth0 -m nukemailz
|
||||||
|
#eth1 -m nukemailz
|
||||||
|
eth1.100 -m nukemailz
|
||||||
|
eth1.101 -m nukemailz
|
||||||
|
eth1.102 -m nukemailz
|
||||||
|
eth1.103 -m nukemailz
|
||||||
|
eth1.104 -m nukemailz
|
|
@ -0,0 +1,2 @@
|
||||||
|
# log arpwatch in a separate file
|
||||||
|
if $programname == 'arpwatch' then /var/log/arpwatch.log
|
Loading…
Reference in New Issue