In article <[EMAIL PROTECTED]> 
[EMAIL PROTECTED] writes:
>I am using arpwatch, but I use a few machines with 2 ethernet cards, and 
>they often flip-flop... As I know them, I want to exclude the flip-flop 
>mails from my mailbox...
>
>How could I tune arpwatch so that it does not listen to those 
>flip-flops, or it does not send mails for these ?

Use the "-s program" option to send the "mail" via a program that does
whatever filtering you want.  I'm filtering out the proxy-arp responces
this way.  (There are hundreds of them every day on my firewall.)

Unless you know all flip-flops will be noise, I'd recomend only filtering
the ones you know about.

-- 
Blars Blarson                   [EMAIL PROTECTED]
                                http://www.blars.org/blars.html
"Text is a way we cheat time." -- Patrick Nielsen Hayden


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to