Dynamic ARP Inspection. Fred Reimer, CISSP Senior Network Engineer Coleman Technologies, Inc. 954-298-1697
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ed Ravin Sent: Wednesday, October 31, 2007 12:59 PM To: Tassos Chatzithomaoglou Cc: cisco-nsp Subject: Re: [c-nsp] report duplicate ips on lan On Wed, Oct 31, 2007 at 06:17:04PM +0200, Tassos Chatzithomaoglou wrote: > So, I'm looking for something that "snoops" the arp/ip packets, > creates an ip-mac table and if an ip stored in this table appears > with a new mac, then report an error. Is there such a feature on > a switch (or router)? I don't know if the Cisco can do it, but you run arpwatch on any computer connected to the LAN: http://www-nrg.ee.lbl.gov/ I've hacked it to query the ARP tables from all the routers in my network, and I save the results in what is basically a list of ARP/IP mappings for the entire organization, so I can get notices of duplicate IPs whenever they happen. _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
