Date: Wed, 12 Jul 2006 04:31:04 +0200 From: =?iso-8859-2?Q?Daniel_Dvo=F8=E1k?= <dandee@hellteam.net> To: <thomas@goodking.ca> Cc: ports@FreeBSD.org Subject: FreeBSD Port: arpwatch-2.1.a14 Message-ID: <000001c6a55b$3a4d0190$6508280a@tocnet28.jspoj.czf>
next in thread | raw e-mail | index | archive | help
Hi all,
=20
let me ask you about arpwatch. The port under FreeBSD does not support =
the
important switch -p, which we can find for example in Debian Linux. This
switch is about "don=B4t put to promisccuous mode", which is really =
needed for
example wireless cards, where promisc kills usually the traffic on =
wi-fi.
=20
I am sorry I do not imagine how much work it is, I simple ask, is it
possible to implement this switch (flag) ?
=20
In the Debian Linux, there are anothers useful flags, but of course -p =
is
the most important one, here they are:
=20
=20
(Debian) The -s flag is used to specify the path to the sendmail
program. Any program that takes the option -odi and then text from =
stdin
can be
substituted. This is useful for redirecting reports to log files
instead of mail.
=20
(Debian) The -p flag disables promiscuous operation. ARP =
broadcasts
get through hubs without having the interface in promiscuous mode, while
sav-
ing considerable resources that would be wasted on processing
gigabytes of non-broadcast traffic. OTOH, setting promiscuous mode =
does
not mean
getting 100% traffic that would concern arpwatch . YMMV.
=20
(Debian) -a By default, arpwatch reports bogons (unless -N is =
given)
for IP addresses that are in the same subnet than the first IP address =
of
the
default interface. If this option is specified, arpwatch will =
report
bogons about every IP addresses.
=20
(Debian) The -m option is used to specify the e-mail address to =
which
reports will be sent. By default, reports are sent to root on the =
local
machine.
=20
(Debian) The -u flag instructs arpwatch to drop root privileges =
and
change the UID to username and GID to the primary group of username . =
This
is
recommended for security reasons, but username has to have write
access to the default directory.
=20
(Debian) The -R flag instructs arpwatch to restart in seconds =
seconds
after the interface went down. By default, in such cases arpwatch =
would
print an error message and exit. This option is ignored if =
either
the -r or -u flags are used.
=20
(Debian) The -Q flags prevents arpwatch from sending reports by =
mail.
=20
(Debian) The -z flag is used to set a range of ip addresses to =
ignore
(such as a DHCP range). Netmask is specified as 255.255.128.0.
=20
Please, I just ask, do not shoot me, thanks :)
=20
Bye
Daniel
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?000001c6a55b$3a4d0190$6508280a>