Your message dated Tue, 11 Jul 2017 00:16:47 +0200
with message-id <20170711001647.7c7c39b3@localhost>
and subject line arpwatch: pcap filter option added
has caused the Debian Bug report #272779,
regarding arpwatch: [patch] exclude self MAC address
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
272779: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=272779
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: arpwatch
Version: 2.1a13-1
Severity: wishlist
As #140505 mentioned 2 and a half years ago it happens to be ugly
when proxy arp is in action under arpwatch. The solution would have been to
ignore packets from self, but seems nobody took the time.
Neither can I, so here's a partial solution:
arpwatch .... -X 00:11:22:33:44:55 ...
exludes packates from MAC address 00:11:22:33:44:55. If this is set to self
address then arpwatch ignores packets originated from itself, if it is set
to another mac proxying then ignores, well, that one.
Patch ought to be ok but a bit ugly since I haven't touched C for the
last decade. Static buffer due to forgetting about strings in C. :) Feel
free to beautify.
grin
-- System Information:
Debian Release: 3.1
APT prefers experimental
APT policy: (950, 'experimental'), (900, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.8.1
Locale: LANG=C, LC_CTYPE=hu_HU
--- End Message ---
--- Begin Message ---
Version: 2.1a15-4
Hi,
thanks for reporting this bug and suggesting a patch. Instead of
merging your patch, we added the `-F` option in arpwatch version
2.1a15-4 (suggested in Debian Bug #600886). This allows specifying
arbitrary filters which are then passed to pcap_compile.
This option can be used to achieve the same as the -X option (and more),
thus I'm closing this bug.
Regards
Lukas
pgpNRQqwmbK7W.pgp
Description: OpenPGP digital signature
--- End Message ---
