On Fri, 16 Mar 2001, Simon Tennant wrote:
> I run arpwatch. It watches for new arp requests and mails me the
> following:
>
> Subject: new station (w192.z064003150.sjc-ca.dsl.cnc.net)
> Date: Thu, 08 Mar 2001 16:49:59 -0800
> From: [EMAIL PROTECTED] (Arpwatch)
> To: [EMAIL PROTECTED]
>
> hostname: w192.z064003150.sjc-ca.dsl.cnc.net
> ip address: 64.3.150.192
> ethernet address: 0:10:67:0:3b:92
> ethernet vendor: Redback Networks, Inc.
> timestamp: Thursday, March 8, 2001 16:49:59 -0800
>
At our campus we're usuing static ARP mapping, with table generated from
our users database. But still one can easily change his MAC :(
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]