![]() ![]() The -Z flag uses zero padded ethernet addresses in arp.dat, e.g. The -z flag disables reporting 0.0.0.0 changes, helpful in busy DHCP-served networks. The -W flag is used specifies the from address for email reports. The -w flag is used to specify the target address for email reports. The -v flag disables the reporting of VRRP/CARP ethernet prefixes as described in RFC5798 (00:00:5e:00:01:xx). The -s flag suppresses reports sent by email. In this case arpwatch does not fork. Note that an empty arp.dat file must be created before the first time you run arpwatch. The -r flag is used to specify a savefile (perhaps created by tcpdump or pcapture) to read from instead of reading from the network. The -q flag suppresses reports being logged or printed to stderr. The -N flag disables reporting any bogons. If the optional width is not specified, the default netmask for the network's class is used. This can be useful to avoid "bogon" warnings when there is more than one network running on the same wire. The -n flag specifies additional local networks. The -i flag is used to override the default interface. The -F flag is prevents arpwatch from forking causing it to run in the foreground. The -f flag is used to set the ethernet/ip address database filename. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |