Hello,

Yes I understand but having some patch for it which can do this would be 
extremely useful. I know about arpwatch and I use it on many networks but I 
working on a solution which parses the log files from a central openvpn tap 
server where multiple l2 networks are bridged together to track where hosts are 
and avoid ip collisions.

Since all of these bridged networks use a different certificate like client1 
client2 client3 it's easy to see from the logs where does a host show up (at 
least it's mac address).

For example laptop A can register on network A B C which are all in 1 layer2 
subnet and this info is updated in the db based on the openvpn logs.

Thanks


Sent with ProtonMail secure email.
------- Original Message -------
On Thursday, March 17th, 2022 at 8:28 AM, Gert Doering <[email protected]> 
wrote:


> Hi,
>
> On Wed, Mar 16, 2022 at 08:09:27PM +0000, dashdruid via Openvpn-users wrote:
>
> > This is an example output for OpenVPN with verb 3 logging:
> >
> > 18:58:39+01:00 server : client1/7.7.7.7:5111 MULTI: Learn: 
> > 46:73:8a:e7:e6:b4 -> client1/7.7.7.7:5111
> > 18:58:39+01:00 server : client1/7.7.7.7:5111 MULTI: Learn: 
> > 21:ba:ed:15:65:7e -> client1/7.7.7.7:5111
> > 18:58:39+01:00 server : client1/7.7.7.7:5111 MULTI: Learn: 
> > 70:b5:f7:31:e3:39 -> client1/7.7.7.7:5111
> > 18:58:40+01:00 server : client1/7.7.7.7:5111 MULTI: Learn: 
> > f1:db:27:92:e0:97 -> client1/7.7.7.7:5111
> >
> > Is there any way to make the server log the remote IP addresses for the 
> > MACs it has learned from the client?
>
>
> In TAP mode, OpenVPN is not interested in IP addresses. It just cares
> about MAC addresses.
>
> Run arpwatch on the "host" side (listening on the tap interface) to get
> the IP/MAC mapping.
>
> gert
> --
> "If was one thing all people took for granted, was conviction that if you
> feed honest figures into a computer, honest figures come out. Never doubted
> it myself till I met a computer with a sense of humor."
> Robert A. Heinlein, The Moon is a Harsh Mistress
>
> Gert Doering - Munich, Germany [email protected]


_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to