nanog mailing list archives
Re: Netcom?
From: Erich Meier <Erich.Meier () informatik uni-erlangen de>
Date: Mon, 29 Sep 1997 16:33:00 +0200 (MET DST)
Scott, One method to detect duplicate IPs is to use SNMP to query your routers every 4 hours for the ARP entries. (ARP times out every 4 hours in a cisco router) We use the CMU snmp package to do the queries. Then put the info into a database and query the database for duplicates. We have a system like this with a web interface and also some scripts that scan ths database daily for duplicates and e-mails notices to people in charge of the relevant subnet. The code is somewhat rough, so I do not want to offer it to the net-at-large. If you can not find a polished product, e-mail me and I'll share more aobut this solution. Art. On Mon, 29 Sep 1997, Scott wrote:Alittle off subject but does anyone out there know of some SW that detects duplicate IP addresses? Scott
I think you are searching for arpwatch. Source can be found at ftp://ftp.ee.lbl.gov/arpwatch.tar.Z It needs libpcap to run but that can be found also at this location. Have fun, Erich -- Erich Meier Erich.Meier () informatik uni-erlangen de http://www4.informatik.uni-erlangen.de/~meier "The truth is not out there. The truth is not out there. The.." - Bart Simpson
Current thread:
- Netcom? Alex Rubenstein (Sep 10)
- Re: Netcom? bmanning (Sep 10)
- Re: Netcom? stickybit (Sep 10)
- Re: Netcom? Scott (Sep 29)
- Re: Netcom? Art Houle (Sep 29)
- Re: Netcom? Erich Meier (Sep 29)
- Re: Netcom? Robert E. Seastrom (Sep 29)
- Re: Netcom? Security Administrator (Sep 29)
- Re: Netcom? Art Houle (Sep 29)
- Re: Netcom? bmanning (Sep 10)